|
62dbad3486
|
polyunfill: remove a few more default systemPackages
|
2024-06-01 21:06:40 +00:00 |
|
|
4287ecf0ed
|
polyfill: don't ship unused mtools package
|
2024-06-01 20:15:04 +00:00 |
|
|
b13ca92b72
|
polyfill: remove boot.{enableContainers,bcache}
|
2024-06-01 20:14:49 +00:00 |
|
|
c7eb4b66a5
|
polyunfill: remove unused su and sg security wrappers
|
2024-05-31 14:59:23 +00:00 |
|
|
c570b7bf5d
|
dbus: manage it ourselves instead of having systemd do it
|
2024-05-29 11:30:33 +00:00 |
|
|
cefd6c0534
|
documentation improvements
|
2024-05-28 13:36:01 +00:00 |
|
|
cbe6072c03
|
polyunfill: remove policykit suid wrappers
|
2024-05-28 05:24:37 +00:00 |
|
|
bea1fd95e5
|
polyunfill: disable dbus-daemon-launch-helper suid wrapper
|
2024-05-28 05:14:06 +00:00 |
|
|
ae544c0649
|
polyunfill: disable mount/umount suid wrappers
|
2024-05-28 05:02:26 +00:00 |
|
|
b571f70988
|
polyunfill: remove fusermount suid wrapper
|
2024-05-28 04:56:14 +00:00 |
|
|
3a045f4d88
|
doc: polyunfill: point to https://github.com/NixOS/nixpkgs/pull/314791
|
2024-05-26 08:00:18 +00:00 |
|
|
57d6a9a4c3
|
polyunfill: simplify pam hacks
|
2024-05-26 07:04:12 +00:00 |
|
|
2ee39ca0cc
|
poly_unfill: remove /run/wrappers/bin/unix_chkpwd
non-privileged users don't need to check passwords
well, maybe they do (for desktop unlockers), but i've already solved that :)
|
2024-05-26 06:37:59 +00:00 |
|
|
9d9211c5fa
|
polyunfill: distribute /run/wrappers/bin/unix_chkpwd without suid bit
|
2024-05-26 01:18:30 +00:00 |
|
|
9ce7dcd57a
|
/run/wrappers: remove unused newgidmap,newuidmap,newgrp binaries
|
2024-05-26 01:18:30 +00:00 |
|
|
c5e7ef7b0c
|
polyunfill: don't ship x86-only kernel modules to moby's initrd
notably, this relaxes some constraints on the kernel so that e.g.
postmarketOS kernel actually passes eval checks (and boots to ssh!
no graphics yet)
|
2024-05-21 22:47:12 +00:00 |
|
|
d0734947bf
|
polyunfill: disable swraid
|
2024-05-21 22:47:12 +00:00 |
|
|
5205251f6f
|
programs: xwayland: sandbox it without exposing net access
|
2024-03-23 15:33:23 +00:00 |
|
|
294563c655
|
dbus: fix to only search /run/current-system/sw/share/dbus-1 for service files
|
2024-03-13 02:04:02 +00:00 |
|
|
083f743c1f
|
remove nixpkgs less defaults and manage PAGER myself
this lets me avoid the lesspipe cross failures, notably
|
2024-02-29 15:18:51 +00:00 |
|
|
55a6c828f2
|
sway: lift portal/menu reset into polyunfill.nix
|
2024-02-21 22:09:53 +00:00 |
|
|
46de7b7e0d
|
move environment.defaultPackages clearing into polyunfill.nix
|
2024-02-20 11:54:39 +00:00 |
|
|
5666a05ef0
|
strip out a bunch of unused nixpkgs defaults
|
2024-02-19 06:20:13 +00:00 |
|