nixpkgs/nixos/modules/security
worldofpeace efc1c027ad nixos/polkit: remove root from adminIdentities
Fixes https://github.com/NixOS/nixpkgs/issues/75075.

To summarize the report in the aforementioned issue, at a glance,
it's a different default than what upstream polkit has. Apparently
for 8+ years polkit defaults admin identities as members of
the wheel group [0]. This assumption would be appropriate on NixOS, where
every member of group 'wheel' is necessarily privileged.

[0]: 763faf434b
2019-12-09 19:11:09 -05:00
..
wrappers treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
acme.nix nixos/acme: Fix allowKeysForGroup not applying immediately (#72056) 2019-11-13 23:51:34 +01:00
acme.xml Revert "nixos/doc: re-format" 2019-09-19 19:17:30 +02:00
apparmor-suid.nix
apparmor.nix nixos/apparmor: ensure that apparmor is selected at boot 2019-05-11 18:21:38 +02:00
audit.nix
auditd.nix auditd service: make more useful 2019-06-10 18:55:11 +03:00
ca.nix nixos: add preferLocalBuild=true; on derivations for config files 2019-02-22 20:11:27 +01:00
chromium-suid-sandbox.nix treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
dhparams.nix
duosec.nix nixos/security: make duo support secure failure correctly 2019-03-17 18:25:20 -07:00
google_oslogin.nix
hidepid.nix
hidepid.xml Revert "nixos/doc: re-format" 2019-09-19 19:17:30 +02:00
lock-kernel-modules.nix
misc.nix nixos/hardened: make pti=on overridable 2019-07-30 02:24:56 +02:00
oath.nix
pam.nix Merge pull request #67748 from typetetris/yubico-local-auth 2019-09-24 03:31:39 +01:00
pam_mount.nix pam_mount: change order of lines in pam_mount.conf 2019-11-03 12:43:01 +08:00
pam_usb.nix
polkit.nix nixos/polkit: remove root from adminIdentities 2019-12-09 19:11:09 -05:00
prey.nix treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
rngd.nix rngd: harden service config, from arch 2019-05-07 22:53:09 -05:00
rtkit.nix
sudo.nix nixos/modules: Remove all usages of types.string 2019-08-31 18:19:00 +02:00
systemd-confinement.nix nixos/confinement: Use PrivateMounts option 2019-03-27 20:34:32 +01:00