nixpkgs/nixos/modules/security
Joachim Fasting 071fbcda24
grsecurity: enable optional sysfs restrictions
Fairly severe, but can be disabled at bootup via
grsec_sysfs_restrict=0. For the NixOS module we ensure that it is
disabled, for systemd compatibility.
2016-12-06 01:23:36 +01:00
..
acme.nix acme: ensure nginx challenges directory is writeable 2016-11-29 15:56:01 +01:00
acme.xml acme: ensure nginx challenges directory is writeable 2016-11-29 15:56:01 +01:00
apparmor-suid.nix apparmor-suid module: fix libcap lib output reference 2016-05-07 21:48:29 +02:00
apparmor.nix
audit.nix audit module: only enable service if kernel has audit (#19569) 2016-10-15 16:03:41 +02:00
ca.nix cacerts: refactor, add blacklist option 2016-10-09 02:00:18 +02:00
chromium-suid-sandbox.nix chromium-suid-sandbox module: fix description 2016-08-08 10:17:31 +03:00
duosec.nix duosec module: use enum 2016-11-16 22:36:05 +09:00
grsecurity.nix grsecurity: enable optional sysfs restrictions 2016-12-06 01:23:36 +01:00
grsecurity.xml grsecurity: enable optional sysfs restrictions 2016-12-06 01:23:36 +01:00
hidepid.nix hidepid module: detailed description to external doc 2016-09-15 15:36:03 +02:00
hidepid.xml hidepid module: detailed description to external doc 2016-09-15 15:36:03 +02:00
oath.nix config.security.oath: new module 2016-02-25 13:52:45 +00:00
pam_mount.nix
pam_usb.nix
pam.nix Revert "nixos/pam: clean up generated files (no functional change) (#18580)" 2016-09-17 16:39:49 -05:00
polkit.nix nixos systemPackages: rework default outputs 2016-01-28 11:24:18 +01:00
prey.nix nixos: fix some types 2015-09-18 18:48:50 +00:00
rngd.nix rngd: update modalias to match cpu type 2016-09-17 18:36:57 -07:00
rtkit.nix
setuid-wrapper.c
setuid-wrappers.nix setuid-wrappers: correctly umount the tmpfs 2016-09-04 17:56:00 +02:00
sudo.nix sudo: Allow root to use sudo to switch groups 2016-09-13 23:15:56 +10:00