krebs/2configs/security-workarounds.nix


1
2
3
4
5
6

{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
{
  # https://github.com/berdav/CVE-2021-4034
  security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
}