l 2: add security-workarounds
This commit is contained in:
parent
8a3515e1a6
commit
21ccde0d72
|
@ -1,5 +1,4 @@
|
||||||
{ config, lib, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
|
|
||||||
with import <stockholm/lib>;
|
with import <stockholm/lib>;
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
|
@ -11,6 +10,7 @@ with import <stockholm/lib>;
|
||||||
../2configs/vim.nix
|
../2configs/vim.nix
|
||||||
../2configs/monitoring/client.nix
|
../2configs/monitoring/client.nix
|
||||||
./backups.nix
|
./backups.nix
|
||||||
|
./security-workarounds.nix
|
||||||
{
|
{
|
||||||
users.extraUsers =
|
users.extraUsers =
|
||||||
mapAttrs (_: h: { hashedPassword = h; })
|
mapAttrs (_: h: { hashedPassword = h; })
|
||||||
|
|
8
lass/2configs/security-workarounds.nix
Normal file
8
lass/2configs/security-workarounds.nix
Normal file
|
@ -0,0 +1,8 @@
|
||||||
|
{ config, pkgs, ... }:
|
||||||
|
with import <stockholm/lib>;
|
||||||
|
{
|
||||||
|
# http://seclists.org/oss-sec/2017/q1/471
|
||||||
|
boot.extraModprobeConfig = ''
|
||||||
|
install dccp /run/current-system/sw/bin/false
|
||||||
|
'';
|
||||||
|
}
|
Loading…
Reference in a new issue