Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

move security-workarounds to krebs and cleanup

Browse Source
This commit is contained in:
lassulus 2022-01-26 13:11:06 +01:00
parent b749315dc7
commit 7666833495
3 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
krebs/2configs/default.nix
View File

@ -4,6 +4,7 @@ with import <stockholm/lib>;
{ {
imports = [ imports = [
./backup.nix ./backup.nix
./security-workarounds.nix
]; ];
krebs.announce-activation.enable = true; krebs.announce-activation.enable = true;
krebs.enable = true; krebs.enable = true;

6
lass/2configs/security-workarounds.nix → krebs/2configs/security-workarounds.nix
View File

@ -1,10 +1,6 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
with import <stockholm/lib>; with import <stockholm/lib>;
{ {
# http://seclists.org/oss-sec/2017/q1/471 # https://github.com/berdav/CVE-2021-4034
boot.extraModprobeConfig = ''
install dccp /run/current-system/sw/bin/false
'';
security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" ""); security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
} }

2
lass/2configs/default.nix
View File

@ -8,7 +8,7 @@ with import <stockholm/lib>;
./vim.nix ./vim.nix
./zsh.nix ./zsh.nix
./htop.nix ./htop.nix
./security-workarounds.nix <stockholm/krebs/2configs/security-workarounds.nix>
./wiregrill.nix ./wiregrill.nix
{ {
users.extraUsers = users.extraUsers =