diff options
| author | obadz <obadz-git@obadz.com> | 2016-08-06 09:13:20 +0100 |
|---|---|---|
| committer | obadz <obadz-git@obadz.com> | 2016-08-06 10:27:47 +0100 |
| commit | 66d5edf654c6c98e3835dbee4f208794fc03c81d (patch) | |
| tree | 5d10a31b734a3870a09ae060d573d3e55127241d /nixos/modules/module-list.nix | |
| parent | 41b8c6d5a9523598d33e81e0ce7a70d02d748bb3 (diff) | |
| download | nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar.gz nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar.bz2 nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar.lz nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar.xz nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.tar.zst nixlib-66d5edf654c6c98e3835dbee4f208794fc03c81d.zip | |
chromium: add nixos module security.chromiumSuidSandbox
Closes #17460 Changed the wrapper derivation to produce a second output containing the sandbox. Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store). This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it. Does not trigger a Chromium rebuild. cc @cleverca22 @joachifm @jasom
Diffstat (limited to 'nixos/modules/module-list.nix')
| -rw-r--r-- | nixos/modules/module-list.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix index d202b5a2c724..6a6730856b15 100644 --- a/nixos/modules/module-list.nix +++ b/nixos/modules/module-list.nix @@ -92,6 +92,7 @@ ./security/apparmor-suid.nix ./security/audit.nix ./security/ca.nix + ./security/chromium-suid-sandbox.nix ./security/duosec.nix ./security/grsecurity.nix ./security/hidepid.nix |