machines/aszlig: temporarily whitelist webkitgtk

webkitgtk-2.4.11 is insecure, I am whitelisting it for now to fix the
evaluation errors on the hydra.

Consider, what you want to do on the issue long term, or just revert
this commit as soon as the CVEs are fixed upstream, @aszlig!

1 files changed, 5 insertions, 0 deletions

diff --git a/machines/aszlig/arilou.nix b/machines/aszlig/arilou.nix
index 8fbc4353..a0cfc195 100644
--- a/machines/aszlig/arilou.nix
+++ b/machines/aszlig/arilou.nix
@@ -7,6 +7,11 @@ let
 
   modulesPath = "${import ../../nixpkgs-path.nix}/nixos/modules";
 in {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   vuizvui.user.aszlig.profiles.workstation.enable = true;
   imports = [ "${modulesPath}/profiles/all-hardware.nix" ];