Pierre Bourdon 67b7e70865 nixos/hardened: make pti=on overridable ... Introduces a new security.forcePageTableIsolation option (default false on !hardened, true on hardened) that forces pti=on.		2019-07-30 02:24:56 +02:00
..
wrappers	nixos/wrappers: remove outdated upgrade code	2018-10-21 15:12:36 +02:00
acme.nix	acme module: fix self-signed cert with openssl 1.1	2018-09-12 13:40:46 +02:00
acme.xml	docs: format	2018-09-29 20:51:11 -04:00
apparmor-suid.nix	apparmor-suid: don't force glibc	2018-10-30 19:50:47 -05:00
apparmor.nix	nixos/apparmor: ensure that apparmor is selected at boot	2019-05-11 18:21:38 +02:00
audit.nix	…
auditd.nix	…
ca.nix	nixos: add preferLocalBuild=true; on derivations for config files	2019-02-22 20:11:27 +01:00
chromium-suid-sandbox.nix	…
dhparams.nix	dhparams module: add self as maintainer	2018-10-31 01:05:35 +09:00
duosec.nix	nixos/security: make duo support secure failure correctly	2019-03-17 18:25:20 -07:00
google_oslogin.nix	config.security.googleOsLogin: add module	2018-12-21 17:52:37 +01:00
hidepid.nix	[bot] nixos/*: remove unused arguments in lambdas	2018-07-20 20:56:59 +00:00
hidepid.xml	docs: format	2018-09-29 20:51:11 -04:00
lock-kernel-modules.nix	nixos/lock-kernel-modules: add myself to maintainers	2018-10-15 01:33:30 +02:00
misc.nix	nixos/hardened: make pti=on overridable	2019-07-30 02:24:56 +02:00
oath.nix	[bot] nixos/*: remove unused arguments in lambdas	2018-07-20 20:56:59 +00:00
pam.nix	nixos/pam: Add GNOME keyring use_authtok directive to password group	2019-04-14 09:50:22 -04:00
pam_mount.nix	…
pam_usb.nix	…
polkit.nix	nixos/polkit: use tmpfiles to clean old dirs	2018-09-30 11:08:11 -07:00
prey.nix	…
rngd.nix	rngd: harden service config, from arch	2019-05-07 22:53:09 -05:00
rtkit.nix	…
sudo.nix	nixos: add preferLocalBuild=true; on derivations for config files	2019-02-22 20:11:27 +01:00
systemd-confinement.nix	nixos/confinement: Use PrivateMounts option	2019-03-27 20:34:32 +01:00