rnhmjoj 1bd7260adb nixos/lock-kernel-modules: reorder before/after ... Moving the service before multi-user.target (so the `hardened` test continue to work the way it did before) can result in locking the kernel too early. It's better to lock it a bit later and changing the test to wait specifically for the disable-kernel-module-loading.service.		2021-09-19 12:06:00 +02:00
..
apparmor	apparmor: Fix cups-client typo	2021-08-23 00:50:15 -07:00
wrappers	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
acme.nix	nixos/acme: harden systemd units	2021-07-06 15:16:01 +02:00
acme.xml	docs: acme: Fix typo	2021-06-06 14:27:13 +02:00
apparmor.nix	nixos/security/apparmor: utillinux -> util-linux	2021-05-17 17:14:08 +02:00
audit.nix
auditd.nix
ca.nix	nixos/security.pki: handle PEMs w/o a final newline	2021-05-16 17:23:11 -07:00
chromium-suid-sandbox.nix	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
dhparams.nix
doas.nix	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
duosec.nix	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
google_oslogin.nix	nixos/google-oslogin: add to system.nssDatabases.group too	2020-05-11 16:14:50 +02:00
lock-kernel-modules.nix	nixos/lock-kernel-modules: reorder before/after	2021-09-19 12:06:00 +02:00
misc.nix	nixos/apparmor: improve code readability	2021-04-23 07:20:19 +02:00
oath.nix
pam_mount.nix	nixos/pam_mount: add support for FUSE-filesystems (#126069)	2021-06-08 22:06:28 +02:00
pam_usb.nix	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
pam.nix	nixos: fix nobody/nogroup in security.wrappers	2021-09-13 13:48:13 +02:00
polkit.nix	nixos: explicitely set security.wrappers ownership	2021-09-13 13:48:13 +02:00
rngd.nix	nixos/rngd: Remove module entirely, leave an explaination	2021-02-21 01:32:50 +01:00
rtkit.nix	nixos: define the primary group of users where needed	2021-09-12 14:59:30 +02:00
sudo.nix	nixos/sudo: add option execWheelOnly	2021-05-08 23:48:00 +02:00
systemd-confinement.nix	nixos/systemd-confinment: use /var/empty as chroot mountpoint	2021-07-01 08:01:18 +02:00
tpm2.nix	nixos: remove StandardOutput=syslog, StandardError=syslog lines	2020-08-13 18:49:15 +02:00