From 390ef8040f77ad08966e15e8a61738e98c17a7fc Mon Sep 17 00:00:00 2001
From: tv <tv@shackspace.de>
Date: Fri, 27 Mar 2015 21:11:01 +0100
Subject: [PATCH] module sanitize: neutralize nano

---
 cd.nix               | 1 +
 modules/sanitize.nix | 8 ++++++++
 mu.nix               | 1 +
 wu.nix               | 1 +
 4 files changed, 11 insertions(+)
 create mode 100644 modules/sanitize.nix

diff --git a/cd.nix b/cd.nix
index 70c8a85ab..8bd2d712a 100644
--- a/cd.nix
+++ b/cd.nix
@@ -4,6 +4,7 @@
   imports =
     [
       <secrets/hashedPasswords.nix>
+      ./modules/sanitize.nix
       ./modules/base-cac-CentOS-7-64bit.nix
       ./modules/exim-cd.nix
       ./modules/ejabberd-cd.nix # XXX echtes modul
diff --git a/modules/sanitize.nix b/modules/sanitize.nix
new file mode 100644
index 000000000..b6c749b6d
--- /dev/null
+++ b/modules/sanitize.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  nixpkgs.config.packageOverrides = pkgs:
+    {
+      nano = /var/empty;
+    };
+}
diff --git a/mu.nix b/mu.nix
index 43211c000..4ec5a21b0 100644
--- a/mu.nix
+++ b/mu.nix
@@ -11,6 +11,7 @@ in
 {
   imports = [
     <secrets/hashedPasswords.nix>
+    ./modules/sanitize.nix
     ./modules/exim.nix
     ./modules/retiolum.nix
   ];
diff --git a/wu.nix b/wu.nix
index 8dc6ce521..7fb71f244 100644
--- a/wu.nix
+++ b/wu.nix
@@ -8,6 +8,7 @@ in
 
 {
   imports = [
+    ./modules/sanitize.nix
     ./modules/base.nix
     ./modules/retiolum.nix
     ./modules/urxvt.nix