about summary refs log tree commit diff
path: root/nixos/modules/security
AgeCommit message (Expand)AuthorFilesLines
2023-09-11nixos/acme: rename option credentialsFile to environmentFiledatafoo2-6/+10
2023-09-11nixos/acme: add option to set credential filesdatafoo1-0/+31
2023-09-11nixos/pam: fix typo in fscrypt enable optionmib1-1/+1
2023-09-10Merge pull request #251770 from robryk/suidwrapapparmPierre Bourdon3-114/+19
2023-09-09security/acme: limit concurrent certificate generationsOliver Schmidt1-13/+93
2023-09-04nixos/sudo: Guard against `security.sudo.package = pkgs.sudo-rs;`nicoo1-0/+4
2023-08-27nixos/security/wrappers: remove all the assertions about readlink(/proc/self/...Robert Obryk3-84/+2
2023-08-27nixos/security/wrappers: read capabilities off /proc/self/exe directlyRobert Obryk1-1/+1
2023-08-27nixos/security/wrappers: stop using `.real` filesRobert Obryk3-32/+16
2023-08-27nixos/security/wrappers: generate a separate and more complete apparmor polic...Robert Obryk1-3/+6
2023-08-24Revert "nixos/security/wrappers: simplifications and a fix for #98863"Pierre Bourdon3-13/+110
2023-08-16nixos/security/wrappers: remove all the assertions about readlink(/proc/self/...Robert Obryk3-84/+2
2023-08-16nixos/security/wrappers: read capabilities off /proc/self/exe directlyRobert Obryk1-1/+1
2023-08-16nixos/security/wrappers: stop using `.real` filesRobert Obryk3-30/+15
2023-08-10security/pam: add umask option to configure pam_mkhomedirAaron Andersen1-1/+11
2023-08-10Merge pull request #231673 from symphorien/suid_wrappers_usernsRyan Lahfa1-6/+34
2023-08-09nixos/wrappers: allow setuid and setgid wrappers to run in user namespacesGuillaume Girol1-6/+34
2023-08-08treewide: stop using types.stringLin Jian2-2/+2
2023-08-04Merge pull request #242538 from tnias/fix/apparmorajs1241-2/+7
2023-07-12nixos/apparmor: support custom i18n glibc localesPhilipp Bartsch1-1/+1
2023-07-09nixos/apparmor: fix syntax in abstractions/bashPhilipp Bartsch1-1/+1
2023-07-09nixos/apparmor: add missing abstraction/nss-systemdPhilipp Bartsch1-0/+3
2023-07-09pam_dp9ik: init at 1.5Jacob Moody1-0/+29
2023-07-08nixos/apparmor: make abstractions/ssl_certs more go friendlyPhilipp Bartsch1-0/+2
2023-07-06nixos/qemu-vm: use CA certificates from hostMichael Hoang1-1/+5
2023-06-25treewide: use optional instead of 'then []'Felix Buehler2-8/+7
2023-06-11nixos/pam: support KanidmMax1-0/+16
2023-05-25nixos/pam_mount: fix mounts without options (#234026)Jenny1-2/+4
2023-05-20nixos/pam_mount: fix cryptmount options (#232873)Jenny1-1/+13
2023-05-15Merge pull request #231316 from hercules-ci/nixos-system.checksRobert Hensing1-1/+1
2023-05-15Merge pull request #231954 from mac-chaffee/acme-ipv6Nick Cao1-1/+1
2023-05-15nixos/pam: fix ZFS support assertionRaito Bezarius1-1/+1
2023-05-15nixos/pam: assert ZFS support for PAM moduleNicola Squartini1-0/+6
2023-05-15nixos/pam: improve documentation of ZFS moduleNicola Squartini1-3/+3
2023-05-15nixos/pam: enable unlocking ZFS home datasetNicola Squartini1-2/+53
2023-05-14security/acme: Fix listenHTTP bug with IPv6 addressesMac Chaffee1-1/+1
2023-05-11nixos: Use checks instead of extraDependenciesRobert Hensing1-1/+1
2023-05-10Merge pull request #230857 from s1341/bugfix_pam_sssdRyan Lahfa1-1/+1
2023-05-09nixos/tpm2: fix typofetsorn1-1/+1
2023-05-09nixos/apparmor: fix typofetsorn1-1/+1
2023-05-09pam: remove unused try_first_passs13411-1/+1
2023-05-09nixos/pam: allow changing password using sssds13411-1/+1
2023-04-24Merge pull request #227232 from datafoo/nixos-acme-fix-options-typeNick Cao1-2/+2
2023-04-20Merge pull request #222080 from Stunkymonkey/nixos-optionalStringArtturi1-2/+2
2023-04-20nixos/acme: fix options typedatafoo1-2/+2
2023-04-07treewide: use more lib.optionalStringFelix Buehler1-2/+2
2023-03-30Merge pull request #207115 from s1341/init_freeipaBenjamin Staffin1-0/+258
2023-03-17Merge master into staging-nextgithub-actions[bot]1-5/+9
2023-03-17doas: refactor config generationSavyasachee Jha1-5/+9
2023-03-16Merge master into staging-nextgithub-actions[bot]2-5/+5