308 commits

Author	SHA1	Message	Date
Thomas Tuegel	8eb4d2afbc	Remove top-level kde5 attribute ... - There is no such thing as KDE 5	2017-02-27 11:49:10 -06:00
Robin Gloster	940492cef5	Merge pull request #22634 from Ekleog/dhparams ... dhparams module: initialize	2017-02-23 17:16:04 +01:00
Vladimír Čunát	4509487e82	nixos polkit: fixup setuid wrapper of pkexec ... Broken in 628e6a8. Fixes #23083.	2017-02-22 23:04:21 +01:00
Nikolay Amiantov	2cc4703a2d	wrappers service: make /run/wrappers a mountpoint ... Also remove some compatibility code because the directory in question would be shadowed by a mountpoint anyway.	2017-02-21 12:13:35 +03:00
Robin Gloster	12b4556642	Merge pull request #22882 from bjornfor/wireshark ... nixos: add programs.wireshark option	2017-02-20 14:03:30 +01:00
Joachim F	6dbe55ca68	Merge pull request #20456 from ericsagnes/feat/loaf-dep-1 ... Use attrsOf in place of loaOf when relevant	2017-02-19 15:49:25 +01:00
Léo Gaspard	e2c78910d1	dhparams module: initialize	2017-02-18 00:07:03 +01:00
Robin Gloster	070825d443	setcapWrapper: add support for setting permissions	2017-02-17 15:42:54 +01:00
Benjamin Staffin	463e90273f	pam: add optional pam_kwallet5 integration	2017-02-16 02:26:42 -05:00
Bjørn Forsman	ce0a52f9bf	nixos/security.wrappers: improve documentation ... * The source attribute is mandatory, not optional * The program attribute is optional * Move the info about the mandatory attribute first (most important, IMHO)	2017-02-15 20:05:27 +01:00
Bjørn Forsman	f9cb2b5640	nixos/security.wrappers: use literalExample in documentation ... It's much more readable when the example attrset is pretty printed instead of written as one line.	2017-02-15 09:08:41 +01:00
Bjørn Forsman	448acd8e5e	nixos: remove remaining reference to setuidPrograms ... The option doesn't exist anymore.	2017-02-15 07:25:33 +01:00
Parnell Springmeyer	1f83f1c878	security-wrapper: Wrap <para> tags in a <note> tag	2017-02-14 21:30:04 -06:00
Parnell Springmeyer	69794e333a	Using para tags for manual formatting	2017-02-14 08:53:30 -06:00
Parnell Springmeyer	794b3721bc	Syntax wibble	2017-02-14 08:42:08 -06:00
Parnell Springmeyer	e856d6efe8	Default should be to set owner and group to root on setcap wrappers too	2017-02-14 08:40:12 -06:00
Parnell Springmeyer	c01689f8da	Fixing ref to old-wrappersDir	2017-02-14 08:33:07 -06:00
Parnell Springmeyer	f8b8c353ff	Simplifying the wrapper program derivation	2017-02-14 08:27:40 -06:00
Parnell Springmeyer	fb6d13c01a	Addressing feedback and fixing a bug	2017-02-14 07:38:45 -06:00
Parnell Springmeyer	ba499e3aa0	Removing unused module option old-wrapperDir	2017-02-14 07:30:21 -06:00
Parnell Springmeyer	a27f35993d	Derp, correctly write the source program's path	2017-02-13 18:28:13 -06:00
Parnell Springmeyer	cca2e11556	Resurrecting the single-wrapper read from sibling .real file behavior	2017-02-13 18:03:06 -06:00
Parnell Springmeyer	9e36a58649	Merging against upstream master	2017-02-13 17:16:28 -06:00
Graham Christensen	96d767de62	pam_oath: require OATH and pam_unix credentials to be valid	2017-02-12 18:27:11 -05:00
Joachim Fasting	0c31286f75	grsecurity docs: some polish ... Fix minor formatting issues, excessive punctuation, and also some improved wording.	2017-02-03 18:47:07 +01:00
Parnell Springmeyer	128bdac94f	Conditionally logging debug messages based on the WRAPPER_DEBUG env var being set (or not)	2017-01-30 12:59:29 -06:00
Parnell Springmeyer	d8ecd5eb0d	Switching to individually generated derivations	2017-01-30 12:26:56 -06:00
Parnell Springmeyer	264db4e309	Set merge + mkIf always surprises me	2017-01-29 17:10:32 -06:00
Parnell Springmeyer	f2f3f1479e	Derp, wrong path name	2017-01-29 16:54:27 -06:00
Parnell Springmeyer	0f728de67e	More migration cleanup + todos for cleanup	2017-01-29 16:52:23 -06:00
Parnell Springmeyer	4856b42ab6	Gotta provide sane defaults! This is what I get for 5AM coding	2017-01-29 16:47:14 -06:00
Parnell Springmeyer	cfe4351c33	I'm clearly very tired	2017-01-29 05:39:54 -06:00
Parnell Springmeyer	1cc500ea8e	Syntax wibble	2017-01-29 05:34:50 -06:00
Parnell Springmeyer	628e6a83d0	More derp	2017-01-29 05:33:56 -06:00
Parnell Springmeyer	70b8167d4a	A few more tweaks	2017-01-29 05:05:30 -06:00
Parnell Springmeyer	4aa0923009	Getting rid of the var indirection and using a bin path instead	2017-01-29 04:11:01 -06:00
Parnell Springmeyer	af3b9a3d46	More wibbles?	2017-01-29 01:41:39 -06:00
Parnell Springmeyer	48564d1ae5	Another wibble	2017-01-29 01:31:33 -06:00
Parnell Springmeyer	5077699605	Derp derp	2017-01-29 01:27:11 -06:00
Parnell Springmeyer	0707a3eaa2	Qualify with lib	2017-01-29 01:23:10 -06:00
Parnell Springmeyer	8e159b9d1e	Qualify mkOption with lib	2017-01-29 01:22:47 -06:00
Parnell Springmeyer	70ec24093c	Removing dead code	2017-01-29 01:22:19 -06:00
Parnell Springmeyer	82de4c0fad	setcap-wrapper: Syntax wibble	2017-01-29 01:20:02 -06:00
Parnell Springmeyer	7680a40a37	setcap-wrapper: Syntax wibble	2017-01-29 01:16:04 -06:00
Parnell Springmeyer	2f113ee90a	setcap-wrapper: Minor refactor	2017-01-29 01:08:36 -06:00
Parnell Springmeyer	3fe7b1a4c9	setcap-wrapper: Addressing more PR feedback, unifying drvs, and cleaning up a bit	2017-01-29 01:07:12 -06:00
Parnell Springmeyer	e92b8402b0	Addressing PR feedback	2017-01-28 20:48:03 -08:00
Parnell Springmeyer	9de070e620	Setuid wrapper should not be constrained to a specific linux kernel version	2017-01-26 09:39:37 -08:00
Parnell Springmeyer	01e6b82f3f	Removing dead code	2017-01-26 09:20:15 -08:00
Parnell Springmeyer	189a0c2579	Wrap with quotes as-per GCC's recommendation	2017-01-26 02:07:36 -08:00