summaryrefslogtreecommitdiffstats
path: root/nixos/modules/security
AgeCommit message (Expand)Author
11 daysMerge pull request #287611 from h7x4/nixos-module-fixup-kerberos-serverh7x4
2024-06-08nixos/kerberos_server: use krb format generator, plus misc cleanuph7x4
2024-06-04nixos/acme: allow setting security.acme.defaults.server = null to keep old ac...Stéphan Kochen
2024-05-13nixos/confinement: Use prio 100 for RootDirectoryaszlig
2024-05-13nixos/systemd-confinement: Make / read-onlyaszlig
2024-05-13nixos/systemd-confinement: support ProtectSystem=/DynamicUser=Julien Moutinho
2024-04-28Merge pull request #277626 from nbraud/nixos/pam/ssh-agent-auth-31611-fixThomas Gerbet
2024-04-22nixos/isolate: init moduleVir Chaudhury
2024-04-22nixos/duosec: Split `mkdir` mode into `chmod` command for clarityVictor Engmark
2024-04-13nixos: remove all uses of lib.mdDocstuebinm
2024-04-09nixos: improve many 'enable' descriptionsBjørn Forsman
2024-04-03More specific link to tag specNoah S-C
2024-04-02nixos/sudo: update command options enum for newer sudo versionNoah Santschi-Cooney
2024-03-28treewide: Fix all Nix ASTs in all markdown filesJanne Heß
2024-03-22nixos/pam: use services.fprintd.package for fprintd ruleNick Cao
2024-03-01Merge pull request #291951 from amarshall/zfs-pkgs-renamingAdam C. Stephens
2024-02-28nixos/pam/kwallet: rename option, allow setting packageK900
2024-02-27nixos/pam: Do not incorrectly use zfs.enableUnstable in assertionAndrew Marshall
2024-02-11Merge pull request #286857 from RaitoBezarius/cacertsRyan Lahfa
2024-02-11nixos/security/ca: enable support for compatibility bundlesRaito Bezarius
2024-02-08pam_usb, nixos/pam-usb: dropRaito Bezarius
2024-02-06nixos/acme: default to lets encrypt production URL instead of null, mention l...Sandro
2024-02-02nixos/pam: Add pam_intuneRhys Davies
2024-02-01Merge pull request #285587 from edef1c/wrapper-cve-2023-6246Pierre Bourdon
2024-02-01nixos/modules/security/wrappers: limit argv0 to 512 bytesedef
2024-01-31nixos/pam: remove pam_cgfsAdam Stephens
2024-01-19nixos/acme: fix assertion for renamed optionéclairevoyant
2024-01-18fix semi-colon missingmian | mian
2024-01-12nixos/pam: Secure default for `sshAgentAuth.authorizedKeysFiles`nicoo
2024-01-10Merge pull request #243169 from 2xsaiko/outgoing/krb5Peder Bergebakken Sundt
2024-01-08nixos/pam: Fix use of renamed `enableSSHAgentAuth` optionnicoo
2024-01-08Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611Maciej Krüger
2024-01-07Merge pull request #276499 from nbraud/nixos/pam/ssh-agent-authMaciej Krüger
2024-01-04nixos/sudo: Remove unused `enableSSHAgentAuth` let-bindingnicoo
2024-01-04nixos/pam: Warn on insecure `sshAgentAuth` configurationsnicoo
2024-01-03nixos/pam: Add `sshAgentAuth.authorizedKeysFiles` optionnicoo
2024-01-03nixos/pam: Rename option `enableSSHAgentAuth` to `sshAgentAuth.enable`nicoo
2024-01-01nixos/auditd: fix typoMaciej Krüger
2023-12-30nixos/pam: Assert that `authorizedKeysFiles` is non-empty when using `pam_ssh...nicoo
2023-12-29nixos/wrappers: order service after sysusers servicenikstur
2023-12-29nixos/ipa: replace activationScriptnikstur
2023-12-27Merge pull request #271326 from philiptaron/shutdown.targetnikstur
2023-12-24nixos/wrapper: add basename of the wrapped program to the wrappers name to ea...Sandro Jäckel
2023-12-24nixos/sudo-rs: Removed unused let-bindingnicoo
2023-12-21nixos/krb5: add h7x4 as maintainerMarco Rebhan
2023-12-21nixos/krb5: add myself as maintainer for module & testsMarco Rebhan
2023-12-21nixos/krb5: move to security.krb5Marco Rebhan
2023-12-11Merge pull request #270224 from SuperSandro2000/patch-2pennae
2023-12-10nixos/acme: add syntax highlighting to code blocksSandro
2023-11-30nixos/suid-sgid-wrappers: ensure correct ordering w.r.t. shutdown.targetPhilip Taron