summary refs log tree commit diff
path: root/nixos/modules/security/polkit.nix
Commit message (Collapse)AuthorAge
* network-link-*.service: Set stopIfChanged = falseEelco Dolstra2017-04-04
| | | | | | | | | | | | This reduces the time window during which IP addresses are gone during switch-to-configuration. A complication is that with stopIfChanged = true, preStop would try to delete the *new* IP addresses rather than the old one (since the preStop script now runs after the switch to the new configuration). So we now record the actually configured addresses in /run/nixos/network/addresses/<interface>. This is more robust in any case. Issue https://github.com/NixOS/nixops/issues/640.
* nixos polkit: fixup setuid wrapper of pkexecVladimír Čunát2017-02-22
| | | | Broken in 628e6a8. Fixes #23083.
* More derpParnell Springmeyer2017-01-29
|
* Addressing PR feedbackParnell Springmeyer2017-01-28
|
* Adapting everything for the merged permissions wrappers work.Parnell Springmeyer2016-09-01
|
* everything?: Updating every package that depended on the old setuidPrograms ↵Parnell Springmeyer2016-09-01
| | | | configuration.
* nixos systemPackages: rework default outputsVladimír Čunát2016-01-28
| | | | | | | | | | | - Now `pkg.outputUnspecified = true` but this attribute is missing in every output, so we can recognize whether the user chose or not. If (s)he didn't choose, we put `pkg.bin or pkg.out or pkg` into `systemPackages`. - `outputsToLink` is replaced by `extraOutputsToLink`. We add extra outputs *regardless* of whether the user chose anything. It's mainly meant for outputs with docs and debug symbols. - Note that as a result, some libraries will disappear from system path.
* Fix system-path with multioutLuca Bruno2015-12-01
|
* nixos/polkit: fix systemd service after spilttingLuca Bruno2015-11-26
|
* nixos/polkit: Reference correct output of polkitTuomas Tynkkynen2015-10-28
|
* polkit: split dev and bin outputsVladimír Čunát2015-10-14
|
* polkit: Remove unnecessary restartEelco Dolstra2014-04-28
| | | | There already is a restart trigger that takes care of this.
* polkit: Restart using systemctlEelco Dolstra2014-04-28
| | | | | The use of pkill is now particularly bad due to containers (it might kill processes in containers).
* Restart polkit if its configuration may have changedEelco Dolstra2014-04-19
|
* Rewrite ‘with pkgs.lib’ -> ‘with lib’Eelco Dolstra2014-04-14
| | | | | | | | Using pkgs.lib on the spine of module evaluation is problematic because the pkgs argument depends on the result of module evaluation. To prevent an infinite recursion, pkgs and some of the modules are evaluated twice, which is inefficient. Using ‘with lib’ prevents this problem.
* polkit: Add some examplesEelco Dolstra2013-11-18
|
* polkit: Fix authenticating as a wheel userEelco Dolstra2013-11-18
| | | | | In Javascript-based PolKit, "unix-user:0;unix-group:wheel" is not valid; it should be a list "unix-user:0", "unix-group:wheel".
* polkit: The rule file needs to end in .rulesEelco Dolstra2013-11-18
| | | | Otherwise it's ignored.
* polkit: major update 0.105 -> 0.112Vladimír Čunát2013-11-09
| | | | | | | - It now uses JavaScript for configuration (only), so I had to "convert" config for NetworkManager. - I tested suspend/restart/(un)mount on KDE/Xfce, Phreedom tested NetworkManager config conversion.
* Add lots of missing option typesEelco Dolstra2013-10-30
|
* Turn security.pam.services into an attribute setEelco Dolstra2013-10-15
| | | | | | | | | | | | That is, you can say security.pam.services.sshd = { options... }; instead of security.pam.services = [ { name = "sshd"; options... } ]; making it easier to override PAM settings from other modules.
* Move all of NixOS to nixos/ in preparation of the repository mergeEelco Dolstra2013-10-10