Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l: workaround for CVE-2021-4034

Browse Source
This commit is contained in:
lassulus 2022-01-26 12:17:04 +01:00
parent 37a3ec2948
commit b749315dc7
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lass/2configs/security-workarounds.nix
View File

@ -1,8 +1,10 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
with import <stockholm/lib>; with import <stockholm/lib>;
{ {
# http://seclists.org/oss-sec/2017/q1/471 # http://seclists.org/oss-sec/2017/q1/471
boot.extraModprobeConfig = '' boot.extraModprobeConfig = ''
install dccp /run/current-system/sw/bin/false install dccp /run/current-system/sw/bin/false
''; '';
security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
} }