summaryrefslogtreecommitdiffstats
path: root/2configs/security
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2022-01-26 18:02:35 +0100
committermakefu <github@syntax-fehler.de>2022-01-26 18:02:39 +0100
commita1a20603173615557696c9af2db7a04f9986c7f6 (patch)
tree056b0cecf64eb8a5c8523d797f5cba3f6c7d42fd /2configs/security
parenteba4a4114ccf205116f4c9ee122bba2d05658e60 (diff)
ma: apply CVE-2021-4034 hotfix
Diffstat (limited to '2configs/security')
-rw-r--r--2configs/security/hotfix.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/2configs/security/hotfix.nix b/2configs/security/hotfix.nix
new file mode 100644
index 000000000..fc52f21e6
--- /dev/null
+++ b/2configs/security/hotfix.nix
@@ -0,0 +1,4 @@
+{ pkgs, lib,... }: {
+ # https://github.com/berdav/CVE-2021-4034
+ security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
+}