about summary refs log tree commit diff
path: root/nixos/modules/programs/firejail.nix
Commit message (Collapse)AuthorAge
* nixos/firejail: fix typoSharzyL2023-12-11
|
* nixos/firejail: remove the need for qualificationsTaeer Bar-Yam2022-11-30
|
* nixos/*: md-convert hidden plaintext optionspennae2022-08-31
| | | | | | | most of these are hidden because they're either part of a submodule that doesn't have its type rendered (eg because the submodule type is used in an either type) or because they are explicitly hidden. some of them are merely hidden from nix-doc-munge by how their option is put together.
* nixos/*: automatically convert option descriptionspennae2022-08-31
| | | | | | | | | | | | conversions were done using https://github.com/pennae/nix-doc-munge using (probably) rev f34e145 running nix-doc-munge nixos/**/*.nix nix-doc-munge --import nixos/**/*.nix the tool ensures that only changes that could affect the generated manual *but don't* are committed, other changes require manual review and are discarded.
* nixos/*: automatically convert option docs to MDpennae2022-08-03
| | | | once again using nix-doc-munge (https://github.com/pennae/nix-doc-munge/commit/69d080323ae27c0d8da3967c62b925a9aedb2828)
* nixos/*: replace <code> in option docs with <literal>pennae2022-08-03
| | | | | | | | | | markdown can't represent the difference without another extension and both the html manual and the manpage render them the same, so keeping the distinction is not very useful on its own. with the distinction removed we can automatically convert many options that use <code> tags to markdown. the manpage remains unchanged, html manual does not render differently (but class names on code tags do change from "code" to "literal").
* nixos/*: replace </para><para> with double linebreakspennae2022-08-03
| | | | | | | | | | our xslt already replaces double line breaks with a paragraph close and reopen. not using explicit para tags lets nix-doc-munge convert more descriptions losslessly. only whitespace changes to generated documents, except for two strongswan options gaining paragraph two breaks they arguably should've had anyway.
* nixos/firejail: Fix order of extrsArgs before profile wrappedBinaries optionJonas Heinrich2022-03-03
|
* firejail: clarify wrappedBinaries option descriptionAidan Gauland2022-01-01
| | | | | | | | | I had trouble getting programs.firejail.wrappedBinaries to have any effect on my system (#152852), because I did not realise that "put[ting] the actual application binary in the global environment" included adding the program package to environment.systemPackages, and I thought that the package must be present for this option to take effect. I have added a clarifying parenthetical statement explicitly mentioning environment.systemPackages in this caveat.
* nixos/doc: clean up defaults and examplesNaïm Favier2021-10-04
|
* nixos: explicitely set security.wrappers ownershiprnhmjoj2021-09-13
| | | | | This is slightly more verbose and inconvenient, but it forces you to think about what the wrapper ownership and permissions will be.
* nixos/firejail: allow to pass options to firejailSymphorien Gibol2020-11-14
|
* nixos/firejail: use local runCommandJoachim Fasting2020-03-14
| | | | | | | | Also: - use `runtimeShell`; and - remove unused `makeWrapper` input; and - `exec()` to shed wrapping shell
* firejail: system package on `programs.firejail.enable`snicket21002020-03-13
| | | | | this way the man page etc. becomes available if we enable firejail with `programs.firejail.enable = true`
* nixos/firejail: add example for wrappedBinariesMartin Milata2020-02-29
|
* treewide: remove redundant recvolth2019-08-28
|
* firejail: add nixos modulePeter Hoeg2018-07-14
Also add support for wrapping binaries with firejail.