nixpkgs-suyu/nixos/modules
Austin Seipp 0ce90d58cc nixos/chrony: clean up, rework to be a little closer to upstream
Most importantly, this sets PrivateTmp, ProtectHome, and ProtectSystem
so that Chrony flaws are mitigated, should they occur.

Moving to ProtectSystem=full however, requires moving the chrony key
files under /var/lib/chrony -- which should be fine, anyway.

This also ensures ConditionCapability=CAP_SYS_TIME is set, ensuring
that chronyd will only be launched in an environment where such a
capability can be granted.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-09-24 15:42:44 -05:00
..
config Merge branch 'master' into staging-next 2018-09-13 10:08:53 +02:00
hardware [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
i18n/input-method nixos docs: more IDs 2018-09-02 15:47:59 -04:00
installer nixos: doc: move non-service parts of service.nixosManual to documentation.nixos 2018-09-23 20:50:47 +00:00
misc nixos: doc: move non-service parts of service.nixosManual to documentation.nixos 2018-09-23 20:50:47 +00:00
profiles Merge pull request #46193 from oxij/nixos/manual-to-doc 2018-09-24 00:09:23 -04:00
programs nixos/yabar: fix module & test (#46954) 2018-09-20 12:47:46 +02:00
security acme module: fix self-signed cert with openssl 1.1 2018-09-12 13:40:46 +02:00
services nixos/chrony: clean up, rework to be a little closer to upstream 2018-09-24 15:42:44 -05:00
system nixos: initrd/luks: make uuid specified devices discoverable 2018-09-24 16:35:46 +02:00
tasks networking.hostId: fix cmd in description 2018-09-11 11:29:04 +02:00
testing nixos/tests: Set DefaultTimeoutStartSec very high (#44916) 2018-08-29 12:12:12 +02:00
virtualisation virtualization/qemu-vm: fix and improve virtio/scsi switching 2018-09-22 23:29:19 +02:00
module-list.nix Merge pull request #46274 from mvnetbiz/libratbag 2018-09-21 22:49:17 +02:00
rename.nix nixos: doc: move non-service parts of service.nixosManual to documentation.nixos 2018-09-23 20:50:47 +00:00