nixpkgs/nixos/modules
Joachim Fasting e99228db30
grsecurity module: force a known good kernel package set
Previously, we would only set a default value, on the theory that
`boot.kernelPackages` could be used to sanely configure a custom grsec
kernel.  Regrettably, this is not the case and users who expect e.g.,
`boot.kernelPackages = pkgs.linuxPackages_latest` to work will end up
with a non-grsec kernel (this problem has come up twice on the bug
tracker recently).

With this patch, `security.grsecurity.enable = true` implies
`boot.kernelPackages = linuxPackages_grsec_nixos` and any customization
must be done via package override or by eschewing the module.
2016-11-28 12:11:04 +01:00
..
config nixos/modules: use defaultText where applicable 2016-11-21 16:35:15 +01:00
hardware bumblebee service: replace bbswitch option with pmMethod 2016-11-22 02:35:12 +03:00
i18n/input-method ibus: refresh cache at startup 2016-10-03 05:25:41 -05:00
installer installation-cd-graphical-kde: put manual link directly on desktop 2016-11-15 07:21:40 -06:00
misc infinoted service: init 2016-11-27 17:23:21 +01:00
profiles nixos: disable sound for minimal ISO 2016-11-23 02:24:13 +01:00
programs nixos/modules: use defaultText where applicable 2016-11-21 16:35:15 +01:00
security grsecurity module: force a known good kernel package set 2016-11-28 12:11:04 +01:00
services cjdns: Improving systemd unit description 2016-11-27 22:07:51 -05:00
system nixos/modules: use defaultText where applicable 2016-11-21 16:35:15 +01:00
tasks network-interfaces: use enum 2016-11-16 22:37:57 +09:00
testing
virtualisation containers module: Add tmpfs options (#20557) 2016-11-22 02:11:33 +01:00
module-list.nix Merge pull request #20620 from rnhmjoj/fakeroute 2016-11-28 03:01:15 +01:00
rename.nix tarsnap service: fix multiple simultaneous archives with a single key 2016-11-20 19:15:52 +03:00