ma: apply CVE-2021-4034 hotfix

2022-01-26 18:02:35 +01:00 · 2022-01-26 18:02:35 +01:00 · a1a2060317
parent eba4a4114c
commit a1a2060317
2 changed files with 5 additions and 0 deletions
--- a/2configs/default.nix
+++ b/2configs/default.nix
@ -11,6 +11,7 @@ with import <stockholm/lib>;
    ./editor/vim.nix
    ./binary-cache/nixos.nix
    ./minimal.nix
+    ./security/hotfix.nix
  ];

  # users are super important
--- a/2configs/security/hotfix.nix
+++ b/2configs/security/hotfix.nix
@ -0,0 +1,4 @@
+{ pkgs, lib,... }: {
+  # https://github.com/berdav/CVE-2021-4034
+  security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
+}