Pierre Bourdon 67b7e70865

nixos/hardened: make pti=on overridable ...

Introduces a new security.forcePageTableIsolation option (default false
on !hardened, true on hardened) that forces pti=on.

2019-07-30 02:24:56 +02:00

..

wrappers

…

acme.nix

…

acme.xml

…

apparmor-suid.nix

…

apparmor.nix

nixos/apparmor: ensure that apparmor is selected at boot

2019-05-11 18:21:38 +02:00

audit.nix

…

auditd.nix

…

ca.nix

…

chromium-suid-sandbox.nix

…

dhparams.nix

…

duosec.nix

nixos/security: make duo support secure failure correctly

2019-03-17 18:25:20 -07:00

google_oslogin.nix

…

hidepid.nix

…

hidepid.xml

…

lock-kernel-modules.nix

…

misc.nix

nixos/hardened: make pti=on overridable

2019-07-30 02:24:56 +02:00

oath.nix

[bot] nixos/*: remove unused arguments in lambdas

2018-07-20 20:56:59 +00:00

pam_mount.nix

…

pam_usb.nix

…

pam.nix

nixos/pam: Add GNOME keyring use_authtok directive to password group

2019-04-14 09:50:22 -04:00

polkit.nix

…

prey.nix

…

rngd.nix

rngd: harden service config, from arch

2019-05-07 22:53:09 -05:00

rtkit.nix

…

sudo.nix

…

systemd-confinement.nix

nixos/confinement: Use PrivateMounts option

2019-03-27 20:34:32 +01:00