summaryrefslogtreecommitdiff
path: root/modules/security
AgeCommit message (Collapse)Author
2024-04-19treewide: remove lib.mdDocWeijia Wang
2024-02-26security.sudo.extraConfig: fix default behaviorSam
2024-02-11security.sudo.extraConfig: initSam
2023-11-11Add security.pki.installCACerts configYacine Hmito
Made is possible to disable the management of /etc/ssl/certs/ca-certificates.crt by Nix darwin.
2023-07-21treewide: fix `mkEnableOption` docsEmily
`mkEnableOption` wraps its argument in a complete sentence with a terminating full stop; an additional newline will add an incorrect space before the end of the sentence in the rendered documentation, and any additional verbiage that doesn't fit into the form "Whether to enable [...]." is also incorrect. In the latter case, the description can be overridden manually.
2023-06-24treewide: convert all option docs to MarkdownEmily
This process was automated by [my fork of `nix-doc-munge`]; thanks to @pennae for writing this tool! It automatically checks that the resulting documentation doesn't change, although my fork loosens this a little to ignore some irrelevant whitespace and typographical differences. As of this commit there is no DocBook remaining in the options documentation. You can play along at home if you want to reproduce this commit: $ NIX_PATH=nixpkgs=flake:nixpkgs/c1bca7fe84c646cfd4ebf3482c0e6317a0b13f22 \ nix shell nixpkgs#coreutils \ -c find . -name '*.nix' \ -exec nix run github:emilazy/nix-doc-munge/0a7190f600027bf7baf6cb7139e4d69ac2f51062 \ {} + [my fork of `nix-doc-munge`]: https://github.com/emilazy/nix-doc-munge
2023-06-24treewide: manually convert some docs to MarkdownEmily
These all use DocBook markup too complex for `nix-doc-munge` to handle, have syntax that clashes with Markdown, or already contain Markdown syntax that currently isn't rendering correctly. Converting DocBook list syntax makes me think that maybe Markdown isn't so bad after all.
2022-09-25rename runCommandNoCCJames Walker
2022-06-30Use GNU version of sed from nixpkgsMalo Bourgon
2022-06-30Fix indent of line added to sudo fileMalo Bourgon
Co-authored-by: Peter Esselius <esselius@users.noreply.github.com>
2022-06-30Use sed to disable sudo touch ID authenticationMalo Bourgon
2022-06-30Change option name and switch to using activation scriptMalo Bourgon
2021-10-23add forward compatibility for literalExample deprecationDaiderd Jordan
Fixes #367
2019-05-04sandbox: add missing option descriptionsDaiderd Jordan
2019-02-16lnl: start tmux panes in a sandbox by defaultDaiderd Jordan
2019-02-16lnl: sandbox fetch-nixpkgs-updates serviceDaiderd Jordan
2019-02-16sandbox: add module for sandbox profilesDaiderd Jordan
This could be used outside of nix-darwin, but this is mainly useful for services since all of the inputs are known there. { # $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls / # ls: cannot access '/': Operation not permitted security.sandbox.profiles.example.closure = [ pkgs.coreutils ]; }
2019-01-15security.pki: add module to configure ca certificatesDaiderd Jordan
This makes NIX_SSL_CERT_FILE configurable and makes /etc/ssl/certs/ca-certificates.crt available like nixos.
2017-11-29security-accessibility: remove optionsDaiderd Jordan
The accessibility database has been protected with SIP since macOS 10.12 and there doesn't seem to be another way to configure this programmatically.
2017-05-24security: add enableAccessibilityAccess optionDaiderd Jordan
2017-05-16security: add example for accessibilityProgramsDaiderd Jordan
2017-05-16security: add option to configure accessibilityProgramsDaiderd Jordan