6 files changed, 30 insertions, 0 deletions
diff --git a/machines/aszlig/arilou.nix b/machines/aszlig/arilou.nix
index 8fbc4353..a0cfc195 100644
--- a/machines/aszlig/arilou.nix
+++ b/machines/aszlig/arilou.nix
@@ -7,6 +7,11 @@ let
 
   modulesPath = "${import ../../nixpkgs-path.nix}/nixos/modules";
 in {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   vuizvui.user.aszlig.profiles.workstation.enable = true;
   imports = [ "${modulesPath}/profiles/all-hardware.nix" ];
 
diff --git a/machines/aszlig/dnyarri.nix b/machines/aszlig/dnyarri.nix
index 513d53cb..6789f729 100644
--- a/machines/aszlig/dnyarri.nix
+++ b/machines/aszlig/dnyarri.nix
@@ -1,6 +1,11 @@
 { pkgs, lib, ... }:
 
 {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   vuizvui.user.aszlig.profiles.workstation.enable = true;
 
   nix.maxJobs = 8;
diff --git a/machines/aszlig/managed/brawndo.nix b/machines/aszlig/managed/brawndo.nix
index 5154d1ce..40d2c8ec 100644
--- a/machines/aszlig/managed/brawndo.nix
+++ b/machines/aszlig/managed/brawndo.nix
@@ -5,6 +5,11 @@ let
   rootUUID = "dbbd5a35-3ac0-4d5a-837d-914457de14a4";
 
 in {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   boot = {
     initrd.availableKernelModules = [
       "xhci_pci" "ehci_pci" "ahci" "usb_storage" "sd_mod" "sr_mod"
diff --git a/machines/aszlig/managed/tyree.nix b/machines/aszlig/managed/tyree.nix
index ecc93217..873ed83c 100644
--- a/machines/aszlig/managed/tyree.nix
+++ b/machines/aszlig/managed/tyree.nix
@@ -1,6 +1,11 @@
 { config, pkgs, unfreeAndNonDistributablePkgs, lib, ... }:
 
 {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   boot.initrd.availableKernelModules = [ "usbhid" ];
   boot.kernelModules = [ "kvm-intel" ];
 
diff --git a/machines/aszlig/mmrnmhrm.nix b/machines/aszlig/mmrnmhrm.nix
index 4f9691ca..4fa3fa24 100644
--- a/machines/aszlig/mmrnmhrm.nix
+++ b/machines/aszlig/mmrnmhrm.nix
@@ -1,6 +1,11 @@
 { pkgs, lib, ... }:
 
 {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   vuizvui.user.aszlig.profiles.workstation.enable = true;
 
   nix.maxJobs = 2;
diff --git a/machines/aszlig/tishtushi.nix b/machines/aszlig/tishtushi.nix
index 21ba9b3a..9fcc4e82 100644
--- a/machines/aszlig/tishtushi.nix
+++ b/machines/aszlig/tishtushi.nix
@@ -6,6 +6,11 @@ let
   storeUUID = "ce1db87b-d717-450d-a212-3685a224f626";
   diskID = "ata-Hitachi_HTS543232A7A384_E2P31243FGB6PJ";
 in {
+  # whitelist insecure webkitgtk
+  nixpkgs.config.permittedInsecurePackages = [
+    "webkitgtk-2.4.11"
+  ];
+
   vuizvui.user.aszlig.profiles.workstation.enable = true;
 
   vuizvui.user.aszlig.system.kernel.enable = true;