jolheiser/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0ce90d58cc
nixpkgs/nixos
History
Austin Seipp 0ce90d58cc nixos/chrony: clean up, rework to be a little closer to upstream 
Most importantly, this sets PrivateTmp, ProtectHome, and ProtectSystem
so that Chrony flaws are mitigated, should they occur.

Moving to ProtectSystem=full however, requires moving the chrony key
files under /var/lib/chrony -- which should be fine, anyway.

This also ensures ConditionCapability=CAP_SYS_TIME is set, ensuring
that chronyd will only be launched in an environment where such a
capability can be granted.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-09-24 15:42:44 -05:00
..
doc Merge pull request #46193 from oxij/nixos/manual-to-doc 2018-09-24 00:09:23 -04:00
lib nixos: doc: move non-service parts of service.nixosManual to documentation.nixos 2018-09-23 20:50:47 +00:00
maintainers create-amis.sh: Change directory for AMIs 2018-07-24 21:19:14 +02:00
modules nixos/chrony: clean up, rework to be a little closer to upstream 2018-09-24 15:42:44 -05:00
tests nixos tests: move common configuration into separate file 2018-09-24 20:07:33 +01:00
COPYING
default.nix
README
release-combined.nix nixos/release-combined: remove keymap tests from tested job 2018-06-06 21:02:55 +02:00
release-small.nix
release.nix nixos: doc: rename manual to manualHTML, cleanup references 2018-09-23 20:47:58 +00:00

README 

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
http://nixos.org/nixos and in the manual in doc/manual.