about summary refs log tree commit diff
path: root/nixos/modules/security/audit.nix
Commit message (Collapse)AuthorAge
* nixos: Move uses of stdenv.shell to runtimeShell.Shea Levy2018-03-01
|
* audit module: only enable service if kernel has audit (#19569)Alexander Ried2016-10-15
|
* audit: Disable by defaultTuomas Tynkkynen2016-08-31
| | | | | | | Because in its default enabled state it it causes a global performance hit on all system calls (https://fedorahosted.org/fesco/ticket/1311) and unwanted spam in dmesg, in particular when using Chromium (https://github.com/NixOS/nixpkgs/issues/13710).
* audit service: Explicitly call auditctl to disable everythingTuomas Tynkkynen2016-08-31
| | | | | | | | Otherwise, journald might be starting auditing. Some reading: - https://fedorahosted.org/fesco/ticket/1311 - https://github.com/systemd/systemd/issues/959 - https://github.com/openSUSE/systemd/commit/64f83d3087402c6f8730c1bc4b8fac59b84d4666
* audit: Disable in containersEelco Dolstra2016-01-26
| | | | | | This barfs: Jan 18 12:46:32 machine 522i0x9l80z7gw56iahxjjsdjp0xi10q-audit-start[506]: The audit system is disabled
* security.audit: add NixOS moduleDan Peebles2016-01-07
Part of the way towards #11864. We still don't have the auditd userland logging daemon, but journald also tracks audit logs so we can already use this.