index
:
nixlib
this commit
master
sixos
Alyssa's collection of Nix expressions
Alyssa Ross
about
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
nixos
/
modules
/
profiles
Commit message (
Expand
)
Author
Age
*
Merge pull request #74378 from ttuegel/lxc-container
adisbladis
2020-04-25
|
\
|
*
docker-container: Remove /etc symlink
Thomas Tuegel
2019-11-27
*
|
nixos/hardened: add emily to maintainers
Emily
2020-04-17
*
|
nixos/hardened: enable user namespaces for root
Emily
2020-04-17
*
|
nixos/hardened: don't set vm.unprivileged_userfaultfd
Emily
2020-04-17
*
|
nixos/hardened: don't set vm.mmap_min_addr
Emily
2020-04-17
*
|
nixos/hardened: don't set vm.mmap_rnd{,_compat}_bits
Emily
2020-04-17
*
|
nixos/hardened: don't set net.core.bpf_jit_harden
Emily
2020-04-17
*
|
nixos/hardened: don't set kernel.unprivileged_bpf_disabled
Emily
2020-04-17
*
|
nixos/hardened: don't set kernel.dmesg_restrict
Emily
2020-04-17
*
|
nixos/hardened: don't set vsyscall=none
Emily
2020-04-17
*
|
nixos/hardened: don't set slab_nomerge
Emily
2020-04-17
*
|
Revert "nixos/hardened: build sandbox incompatible with namespaces"
Florian Klink
2020-04-05
*
|
Merge pull request #73763 from kmcopper/hardening-profile
Joachim F
2020-04-03
|
\
\
|
*
|
nixos/hardened: scudo default allocator. zero by default allow override.
Kyle Copperfield
2019-11-26
|
*
|
nixos/hardened: build sandbox incompatible with namespaces
Kyle Copperfield
2019-11-19
*
|
|
Remove unused 'rogue' service
Eelco Dolstra
2020-03-24
*
|
|
services/misc/nixos-manual.nix: Remove
Eelco Dolstra
2020-03-24
|
|
/
|
/
|
*
|
nixos/plasma5: drop enableQt4Support option
Jan Tojnar
2019-11-22
|
/
*
profiles/graphical.nix: Drop systemWide pulseaudio in iso
Elis Hirwing
2019-11-11
*
Revert "installer: Disable udisks"
Franz Pletz
2019-10-16
*
nixos/hardened: blacklist old filesystems (#70482)
Joachim F
2019-10-12
*
qemu-guest: allow to override security.rngd
Matthieu Coudron
2019-09-18
*
Merge pull request #63773 from flokli/installation-device-fixes
Florian Klink
2019-08-31
|
\
|
*
nixos/installation-device.nix: explain sshd usage
Florian Klink
2019-08-19
*
|
Merge pull request #66687 from joachifm/feat/hardened-nixos-revert-graphene-m...
Marek Mahut
2019-08-19
|
\
\
|
|
/
|
/
|
|
*
Revert "nixos/hardened: use graphene-hardened malloc by default"
Joachim Fasting
2019-08-15
*
|
nixos/systemd: install sysctl snippets
Florian Klink
2019-08-18
|
/
*
nixos-hardened: disable unprivileged userfaultfd syscalls
Joachim Fasting
2019-08-15
*
nixos-hardened: enable page alloc randomization
Joachim Fasting
2019-08-15
*
installer: Don't run as root
worldofpeace
2019-08-12
*
nixos/hardened: make pti=on overridable
Pierre Bourdon
2019-07-30
*
Renaming security.virtualization.flushL1DataCache to virtualisation
Marek Mahut
2019-07-19
*
nixos/hardened: harder inet defaults
Joachim Fasting
2019-07-04
*
nixos/hardened: disable ftrace by default
Joachim Fasting
2019-07-04
*
nixos/hardened: use graphene-hardened malloc by default
Joachim Fasting
2019-05-07
*
profiles/graphical.nix: Enable pulseaudio for virtualbox appliances
Elis Hirwing
2019-02-22
*
types.optionSet: deprecate and remove last usages
danbst
2019-01-31
*
modules/profiles/minimal: sound is disabled by default
Profpatsch
2019-01-13
*
nixos/hardened profile: always enable pti
Joachim Fasting
2019-01-05
*
nixos/hardened profile: slab/slub hardening
Joachim Fasting
2019-01-05
*
nixos/security/misc: expose SMT control option
Joachim Fasting
2018-12-27
*
nixos/security/misc: expose l1tf mitigation option
Joachim Fasting
2018-12-27
*
nixos/security/misc: factor out protectKernelImage
Joachim Fasting
2018-12-27
*
Revert "zfs cannot be distributed. Disabling it in the isos."
Graham Christensen
2018-11-26
*
Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...
Ding Xiang Fei
2018-11-26
|
\
|
*
nixos/hardened: restrict access to nix daemon
Joachim Fasting
2018-11-24
*
|
Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...
Ding Xiang Fei
2018-11-14
|
\
|
|
*
Merge pull request #49326 from c0bw3b/nixos/installation-device
Eelco Dolstra
2018-10-30
|
|
\
|
|
*
installation-device: set GC initial heap size to 1MB
Renaud
2018-10-28
[next]