diff options
| author | lassulus <lassulus@lassul.us> | 2022-01-26 13:11:06 +0100 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2022-01-26 13:11:06 +0100 |
| commit | 76668334958011b69747d5e09691cf21703938cc (patch) | |
| tree | bc5a2968dbab951b8080efe213cfd330cbc05821 /krebs/2configs | |
| parent | b749315dc7db653d1f077e775eab28d206a029a4 (diff) | |
move security-workarounds to krebs and cleanup
Diffstat (limited to 'krebs/2configs')
| -rw-r--r-- | krebs/2configs/default.nix | 1 | ||||
| -rw-r--r-- | krebs/2configs/security-workarounds.nix | 6 |
2 files changed, 7 insertions, 0 deletions
diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix index 9200d41fe..38d770316 100644 --- a/krebs/2configs/default.nix +++ b/krebs/2configs/default.nix @@ -4,6 +4,7 @@ with import <stockholm/lib>; { imports = [ ./backup.nix + ./security-workarounds.nix ]; krebs.announce-activation.enable = true; krebs.enable = true; diff --git a/krebs/2configs/security-workarounds.nix b/krebs/2configs/security-workarounds.nix new file mode 100644 index 000000000..27d1f8485 --- /dev/null +++ b/krebs/2configs/security-workarounds.nix @@ -0,0 +1,6 @@ +{ config, lib, pkgs, ... }: +with import <stockholm/lib>; +{ + # https://github.com/berdav/CVE-2021-4034 + security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" ""); +} |