Joachim Fasting da767356f2

grsecurity: support disabling TCP simultaneous connect ...

Defaults to OFF because disabling TCP simultaneous connect breaks some
legitimate use cases, notably WebRTC [1], but it's nice to provide the
option for deployments where those features are unneeded anyway.

This is an alternative to https://github.com/NixOS/nixpkgs/pull/4937

[1]: http://article.gmane.org/gmane.linux.documentation/9425

2016-05-04 03:53:24 +02:00

..

acme.nix

acme.nix: Fix unit descriptions

2016-04-18 14:20:49 +02:00

acme.xml

nixos/acme: Add module documentation

2015-12-12 16:06:53 +01:00

apparmor-suid.nix

treewide: Mass replace 'libcap}/lib' to refer the 'out' output

2016-01-24 10:03:35 +02:00

apparmor.nix

nixos: add AppArmor PAM support

2015-07-15 12:40:06 +02:00

audit.nix

audit: Disable in containers

2016-01-26 16:25:40 +01:00

ca.nix

cacert: fix formatting of example

2016-02-27 22:25:39 +13:00

duosec.nix

Fix user-facing typos (mainly in descriptions)

2014-12-30 03:31:03 +01:00

grsecurity.nix

grsecurity: support disabling TCP simultaneous connect

2016-05-04 03:53:24 +02:00

hidepid.nix

nixos: add optional process information hiding

2016-04-10 12:27:06 +02:00

oath.nix

config.security.oath: new module

2016-02-25 13:52:45 +00:00

pam_mount.nix

pam_mount module: integrate pam_mount into PAM of NixOS

2015-07-04 23:42:31 +02:00

pam_usb.nix

…

pam.nix

config.security.oath: new module

2016-02-25 13:52:45 +00:00

polkit.nix

nixos systemPackages: rework default outputs

2016-01-28 11:24:18 +01:00

prey.nix

nixos: fix some types

2015-09-18 18:48:50 +00:00

rngd.nix

nixos/rngd: some fixes

2015-01-06 17:27:07 +03:00

rtkit.nix

…

setuid-wrapper.c

…

setuid-wrappers.nix

nixos/setuid-wrappers: Build with normal mkDerivation phases

2015-10-03 14:08:55 +02:00

sudo.nix

sg: add setuid wrapper. (newgrp is a symlink to sg and was already setuid).

2015-03-30 23:50:45 +01:00