1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs synced 2024-10-23 09:00:28 -04:00
nixpkgs/nixos/modules/security
obadz 66d5edf654 chromium: add nixos module security.chromiumSuidSandbox
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
2016-08-06 10:27:47 +01:00
..
acme.nix Escape all shell arguments uniformly 2016-06-12 18:11:37 +01:00
acme.xml acme: added option security.acme.preliminarySelfsigned (#15562) 2016-06-01 11:39:46 +01:00
apparmor-suid.nix
apparmor.nix
audit.nix
ca.nix
chromium-suid-sandbox.nix chromium: add nixos module security.chromiumSuidSandbox 2016-08-06 10:27:47 +01:00
duosec.nix
grsecurity.nix grsecurity module: disable EFI runtime services by default 2016-08-02 10:24:49 +02:00
hidepid.nix
oath.nix
pam.nix
pam_mount.nix
pam_usb.nix
polkit.nix
prey.nix
rngd.nix
rtkit.nix
setuid-wrapper.c
setuid-wrappers.nix setuid-wrappers: remove config.system.path from the closure 2016-05-23 13:47:23 +01:00
sudo.nix