colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
eb0050ca45
nixpkgs/nixos/modules/services/security
History
Michael Weiss eb0050ca45 nixos/sks: Use a group and don't add sks to systemPackages 
Without a group the gid will default to 65534 (2^16 - 2) which maps to
"nogroup". IMO it makes more sense to explicitly set a valid group.

Adding pkgs.sks to environment.systemPackages is not required (IIRC we
want to avoid bloating environment.systemPackages). Instead it seems
like a better idea to make the relevant binaries available to the user
sks and enable useDefaultShell so that "su -l sks" can be used for
manual interaction (that way the files will always have the correct
owner).
2018-09-08 16:24:05 +02:00
..
certmgr.nix nixos/certmgr: init 2018-08-10 09:56:25 +02:00
cfssl.nix nixos/cfssl: don't create user/group unless service is enabled 2018-08-21 16:24:31 -04:00
clamav.nix nixos/modules: users.(extraUsers|extraGroup->users|group) 2018-06-30 03:02:58 +02:00
fail2ban.nix fail2ban service : improve ssh jail (#21131) 2016-12-14 14:58:02 +01:00
fprintd.nix nixos/fprintd: add service and pam support 2015-01-03 19:50:40 +03:00
fprot.nix nixos/modules: users.(extraUsers|extraGroup->users|group) 2018-06-30 03:02:58 +02:00
haka.nix nixos/treewide: remove boolean examples for options 2017-03-17 23:36:19 +01:00
haveged.nix haveged module: clean up service configuration (#18513) 2016-09-13 07:07:46 +02:00
hologram-agent.nix nixos/modules: rename IP addresses/routes options 2018-02-17 14:57:07 +01:00
hologram-server.nix hologram-server module: add cache timeout option 2018-03-21 12:58:25 -04:00
munge.nix nixos/munge: run munge as user munge instead of root. (#41509) 2018-06-09 00:50:28 +02:00
oauth2_proxy_nginx.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
oauth2_proxy.nix nixos/modules: users.(extraUsers|extraGroup->users|group) 2018-06-30 03:02:58 +02:00
physlock.nix physlock: add allowAnyUser option 2018-02-02 14:03:00 +01:00
shibboleth-sp.nix shibboleth: Add Myself as a Maintainer (#25817) 2017-05-16 10:11:55 +01:00
sks.nix nixos/sks: Use a group and don't add sks to systemPackages 2018-09-08 16:24:05 +02:00
sshguard.nix sshguard: service creates /var/lib/sshguard 2018-05-05 00:29:44 -05:00
tor.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
torify.nix nixos: Move uses of stdenv.shell to runtimeShell. 2018-03-01 14:38:53 -05:00
torsocks.nix nixos: Move uses of stdenv.shell to runtimeShell. 2018-03-01 14:38:53 -05:00
usbguard.nix nixos/usbguard: ensure the audit log file can be created 2018-08-30 21:54:22 +01:00
vault.nix services-vault: make package configurable and add extraConfig option 2018-08-09 23:22:53 +02:00