nixpkgs/nixos/modules/security
aszlig e4bd1e8f92
nixos/confinement: Use prio 100 for RootDirectory
One of the module that already supports the systemd-confinement module
is public-inbox. However with the changes to support DynamicUser and
ProtectSystem, the module will now fail at runtime if confinement is
enabled (it's optional and you'll need to override it via another
module).

The reason is that the RootDirectory is set to /var/empty in the
public-inbox module, which doesn't work well with the InaccessiblePaths
directive we now use to support DynamicUser/ProtectSystem.

To make this issue more visible, I decided to just change the priority
of the RootDirectory option definiton the default override priority so
that whenever another different option is defined, we'll get a conflict
at evaluation time.

Signed-off-by: aszlig <aszlig@nix.build>
2024-05-13 00:40:41 +02:00
..
acme nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
apparmor nixos/network-interfaces: stop wrapping ping with cap_net_raw 2023-09-21 16:52:16 +08:00
krb5 nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
wrappers nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
apparmor.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
audit.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
auditd.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
ca.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
chromium-suid-sandbox.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
dhparams.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
doas.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
duosec.nix nixos/duosec: Split mkdir mode into chmod command for clarity 2024-04-22 01:40:55 +10:00
google_oslogin.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
ipa.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
isolate.nix nixos/isolate: init module 2024-04-22 10:19:09 +08:00
lock-kernel-modules.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
misc.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
oath.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
pam_mount.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
pam.nix Merge pull request #277626 from nbraud/nixos/pam/ssh-agent-auth-31611-fix 2024-04-28 09:24:38 +02:00
please.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
polkit.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
rngd.nix
rtkit.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
sudo-rs.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
sudo.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
systemd-confinement.nix nixos/confinement: Use prio 100 for RootDirectory 2024-05-13 00:40:41 +02:00
tpm2.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00