Lucas Savva 083aba4f83 nixos/acme: Ensure certs are always protected ... As per #121293, I ensured the UMask is set correctly and removed any unnecessary chmod/chown/chgrp commands. The test suite already partially covered permissions checking but I added an extra check for the selfsigned cert permissions.		2021-05-15 12:41:33 +01:00
..
wrappers	Update nixos/modules/security/wrappers/wrapper.nix	2021-01-14 09:00:34 +00:00
acme.nix	nixos/acme: Ensure certs are always protected	2021-05-15 12:41:33 +01:00
acme.xml	nixos/acme: fix docs	2021-01-29 18:56:28 +01:00
apparmor-suid.nix	Revert "apparmor: fix and improve the service"	2020-10-07 12:22:18 +02:00
apparmor.nix	Revert "apparmor: fix and improve the service"	2020-10-07 12:22:18 +02:00
audit.nix	nixos: Move uses of stdenv.shell to runtimeShell.	2018-03-01 14:38:53 -05:00
auditd.nix	auditd service: make more useful	2019-06-10 18:55:11 +03:00
ca.nix	nixos: add preferLocalBuild=true; on derivations for config files	2019-02-22 20:11:27 +01:00
chromium-suid-sandbox.nix	nixos/treewide: Move rename.nix imports to their respective modules	2019-12-10 02:51:19 +01:00
dhparams.nix	dhparams module: add self as maintainer	2018-10-31 01:05:35 +09:00
doas.nix	nixos/doas: add noLog option	2020-11-14 19:16:56 -08:00
duosec.nix	treewide: fix modules options types where the default is null	2020-04-28 19:13:59 +02:00
google_oslogin.nix	nixos/google-oslogin: add to system.nssDatabases.group too	2020-05-11 16:14:50 +02:00
lock-kernel-modules.nix	nixos/lock-kernel-modules: add myself to maintainers	2018-10-15 01:33:30 +02:00
misc.nix	nixos/security/misc: add option unprivilegedUsernsClone	2020-08-25 14:18:24 +03:00
oath.nix	[bot] nixos/*: remove unused arguments in lambdas	2018-07-20 20:56:59 +00:00
pam_mount.nix	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
pam_usb.nix	[bot] treewide: remove unused 'inherit' in let blocks	2018-07-20 19:38:19 +00:00
pam.nix	gnome: rename from gnome3	2021-05-08 09:47:42 +02:00
polkit.nix	nixos/polkit: remove root from adminIdentities	2019-12-09 19:11:09 -05:00
rngd.nix	nixos/rngd: Remove module entirely, leave an explaination	2021-02-21 01:32:50 +01:00
rtkit.nix	treewide: use attrs instead of list for types.loaOf options	2020-01-06 10:39:18 -05:00
sudo.nix	nixos/sudo: add option execWheelOnly	2021-05-08 23:48:00 +02:00
systemd-confinement.nix	confinement: fix assert for serviceConfig.ProtectSystem	2020-10-14 11:56:18 +02:00
tpm2.nix	nixos: remove StandardOutput=syslog, StandardError=syslog lines	2020-08-13 18:49:15 +02:00