greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
96ea2e671c
nix-bitcoin/modules
History
Erik Arvstedt 96ea2e671c
security: simplify and fix dbus configuration 
Previously, due to the dependency on a helper service, this dbus config
was initially inactive after system boot, allowing for unrestricted use
of the problematic dbus call.
This also broke the accompanying VM test on faster systems.

Remove 'allow' policy for root because it's a no-op:
1. It's overridden by the 'mandatory' deny policy.
2. Root can use all dbus calls anyways, regardless of policy settings.

Also, add some comments.
2020-08-20 13:12:06 +02:00
..
deployment extract module 'deployment/nixops.nix', add option 'deployment.secretsDir' 2020-03-24 21:43:21 +00:00
presets backups: add module 2020-08-04 15:25:37 +00:00
secrets Fix typos 2020-08-04 13:32:06 +00:00
backups.nix backups: add module 2020-08-04 15:25:37 +00:00
banlist.cli.txt banlist: update to newest version 2020-06-11 09:23:26 +00:00
bitcoind.nix Merge #218: Fix typos 2020-08-04 15:13:09 +00:00
clightning.nix clightning: refactor bind-addr to be IP address only 2020-08-04 14:07:02 +00:00
default.nix rename nix-bitcoin.nix -> presets/secure-node.nix 2020-04-08 17:35:12 +02:00
electrs.nix bitcoind: switch from rpcpassword to rpcauth 2020-07-28 14:32:47 +00:00
hardware-wallets.nix add module assertions 2020-06-17 09:23:17 +00:00
lightning-charge.nix lightning-charge: add netns 2020-07-21 09:38:47 +00:00
lightning-loop.nix lightning-loop: add module 2020-07-28 15:55:52 +00:00
liquid.nix Fix typos 2020-08-04 13:32:06 +00:00
lnd.nix lnd: make listen IP address only 2020-08-04 14:07:08 +00:00
modules.nix rename dbus.nix -> security.nix 2020-08-20 13:12:06 +02:00
nanopos.nix nanopos: add netns 2020-07-21 09:38:49 +00:00
netns-isolation.nix clightning: refactor bind-addr to be IP address only 2020-08-04 14:07:02 +00:00
nix-bitcoin-services.nix netns-isolation: netns architecture 2020-07-21 09:38:20 +00:00
nix-bitcoin-webindex.nix nginx: add netns 2020-07-21 09:38:53 +00:00
nix-bitcoin.nix fix syntax error 2020-05-06 12:13:32 +02:00
nodeinfo.nix nodeinfo: Convert to module and allow alternative operator username 2020-05-19 11:13:24 +00:00
onion-chef.nix service hardening: Add PrivateUsers 2020-05-22 16:16:19 +00:00
recurring-donations.nix recurring-donations: add netns 2020-07-21 09:38:51 +00:00
security.nix security: simplify and fix dbus configuration 2020-08-20 13:12:06 +02:00
spark-wallet.nix spark-wallet: add netns 2020-07-21 09:38:45 +00:00