nixpkgs/nixos/modules/security
obadz a05a340e26 PAM: reorganize the way pam_ecryptfs and pam_mount get their password
Run pam_unix an additional time rather than switching it from sufficient
to required. This fixes a potential security issue for
ecryptfs/pam_mount users as with pam_deny gone, if cfg.unixAuth = False
then it is possible to login without a password.
2015-11-21 21:10:40 +00:00
..
apparmor-suid.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
apparmor.nix nixos: add AppArmor PAM support 2015-07-15 12:40:06 +02:00
ca.nix Merge branch 'master.upstream' into staging.upstream 2015-06-17 11:57:40 -07:00
duosec.nix Fix user-facing typos (mainly in descriptions) 2014-12-30 03:31:03 +01:00
grsecurity.nix grsecurity: Update stable and test patches 2015-05-11 02:45:38 +02:00
pam_mount.nix pam_mount module: integrate pam_mount into PAM of NixOS 2015-07-04 23:42:31 +02:00
pam_usb.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
pam.nix PAM: reorganize the way pam_ecryptfs and pam_mount get their password 2015-11-21 21:10:40 +00:00
polkit.nix polkit: Remove unnecessary restart 2014-04-28 23:57:37 +02:00
prey.nix nixos: fix some types 2015-09-18 18:48:50 +00:00
rngd.nix nixos/rngd: some fixes 2015-01-06 17:27:07 +03:00
rtkit.nix rtkit: Update from 0.10 to 0.11 2014-04-21 23:22:10 +02:00
setuid-wrapper.c setuid-wrapper: Fix broken string comparison 2014-04-19 10:58:30 +02:00
setuid-wrappers.nix Remove some setuid wrappers for non-standard programs 2014-09-05 14:46:36 +02:00
sudo.nix sg: add setuid wrapper. (newgrp is a symlink to sg and was already setuid). 2015-03-30 23:50:45 +01:00