Eelco Dolstra fd5bbdb436 nixos-containers: Set DevicePolicy=closed ...

This makes the container a bit more secure, by preventing root
creating device nodes to access the host file system, for
instance. (Reference: systemd-nspawn@.service in systemd.)

2016-07-28 17:58:55 +02:00

..

config

pulseaudio module: add extraClientConf option

2016-07-19 00:14:58 +02:00

hardware

nixos ati_unfree: auto-switch xorg to fglrxComat

2016-05-23 10:12:44 +02:00

i18n/input-method

fcitx: refactor (#16858)

2016-07-11 17:50:22 +02:00

installer

nixos-version: fix syntax error and add -h (#16906)

2016-07-13 09:11:32 +02:00

misc

Add gocd agent and server service packages (#16273)

2016-07-23 00:29:18 +02:00

profiles

documentation: fix start display-manager command

2016-07-04 10:25:31 +02:00

programs

tmux module: do not override keys by default in VI mode (#17330)

2016-07-28 13:10:42 +02:00

security

grsecurity module: assert RBAC support in kernel

2016-07-24 12:54:07 +02:00

services

Revert "nginx: Verify that configuration is syntactically correct" (#17337)

2016-07-28 13:55:06 +02:00

system

Merge pull request #17042 from rasendubi/etc

2016-07-26 09:04:10 +02:00

tasks

kbd task: fix colors in early initrd

2016-07-24 15:08:49 +03:00

testing

KDE test: Bump kdm start timeout

2016-05-27 11:22:27 +02:00

virtualisation

nixos-containers: Set DevicePolicy=closed

2016-07-28 17:58:55 +02:00

module-list.nix

Revert "phpfpm service: restructured pool configuration"

2016-07-27 23:53:58 +02:00

rename.nix

nixos: rewrite the grsecurity module

2016-06-14 03:38:12 +02:00