summaryrefslogtreecommitdiffstats
path: root/nixos/modules/security
AgeCommit message (Expand)Author
2019-05-13FIx some malformed XML in option descriptionsEelco Dolstra
2019-05-12Merge pull request #61306 from joachifm/feat/fix-apparmor-boot-linux_5_1Joachim F
2019-05-11nixos/apparmor: ensure that apparmor is selected at bootJoachim Fasting
2019-05-07rngd: harden service config, from archWill Dietz
2019-05-06rngd: add option to run w/debug flagWill Dietz
2019-04-28nixos/apparmor: allow reloading profiles without losing confinementJoachim Fasting
2019-04-28nixos/apparmor: order before sysinit.targetJoachim Fasting
2019-04-21nixos/hardened: split description of allowUserNamespaces into parasJoachim Fasting
2019-04-14nixos/pam: Add GNOME keyring use_authtok directive to password groupAlexander Kahl
2019-03-31yubico-pam: add nixos integrationWill Dietz
2019-03-29Merge pull request #57519 (systemd-confinement)aszlig
2019-03-27nixos/confinement: Use PrivateMounts optionaszlig
2019-03-27nixos/confinement: Remove handling for StartOnlyaszlig
2019-03-17nixos/security: make duo support secure failure correctlyAlex Guzman
2019-03-15nixos/confinement: Explicitly set serviceConfigaszlig
2019-03-14nixos/confinement: Allow to include the full unitaszlig
2019-03-14nixos/confinement: Allow to configure /bin/shaszlig
2019-03-14nixos/systemd-chroot: Rename chroot to confinementaszlig
2019-03-14nixos: Add 'chroot' options to systemd.servicesaszlig
2019-02-25Merge pull request #55792 from sdier/fix/pam-updateSilvan Mosberger
2019-02-24nixos/security: Fix pam configuration file generation.Scott Dier
2019-02-24nixos/security: Allow configuration of pam for duosec.Scott Dier
2019-02-24nixos/security: Add duo-unix support to pam.Scott Dier
2019-02-22nixos: add preferLocalBuild=true; on derivations for config filesSymphorien Gibol
2019-01-30Merge pull request #53762 from ju1m/nslcdFlorian Klink
2019-01-29nixos/pam: refactor U2F, docs about u2f_keys path (#54756)Wael Nasreddine
2019-01-18nixos/tests: test LDAP password changing through nslcdJulien Moutinho
2018-12-27nixos/security/misc: expose SMT control optionJoachim Fasting
2018-12-27nixos/security/misc: expose l1tf mitigation optionJoachim Fasting
2018-12-27nixos/security/misc: factor out protectKernelImageJoachim Fasting
2018-12-27nixos/security/misc: use mkMerge for easier extensionJoachim Fasting
2018-12-21config.security.googleOsLogin: add moduleFlorian Klink
2018-12-21security.pam.services.<name?>.: add googleOsLogin(AccountVerification|Authent...Florian Klink
2018-12-21security.pam: make pam_unix.so required, not sufficientFlorian Klink
2018-11-05nixos/rngd: do not pass --version flagGabriel Ebner
2018-10-30apparmor-suid: don't force glibcWill Dietz
2018-10-31dhparams module: add self as maintainerLéo Gaspard
2018-10-28nixos/rngd: fix exec flags and udev rulesRenaud
2018-10-24nixos/rngd: use new name pkgs.rng-toolsRenaud
2018-10-21nixos/wrappers: remove outdated upgrade codeLinus Heckemann
2018-10-15Merge pull request #48439 from joachifm/hardened-miscJoachim F
2018-10-15nixos/security/misc: initJoachim Fasting
2018-10-15nixos/lock-kernel-modules: add myself to maintainersJoachim Fasting
2018-10-02Merge pull request #47563 from jameysharp/unscriptedJörg Thalheim
2018-09-30nixos/pam: create wtmp/lastlog iff using pam_lastlogJamey Sharp
2018-09-30nixos/polkit: use tmpfiles to clean old dirsJamey Sharp
2018-09-29docs: formatGraham Christensen
2018-09-12acme module: fix self-signed cert with openssl 1.1Robin Gloster
2018-09-01nixos docs: give IDs to thingsGraham Christensen
2018-07-23Merge pull request #42834 from Synthetica9/patch-1Matthew Bauer