Franz Pletz 0d59fc1169 cacerts: refactor, add blacklist option ... Previously, the list of CA certificates was generated with a perl script which is included in curl. As this script is not very flexible, this commit refactors the expression to use the python script that Debian uses to generate their CA certificates from Mozilla's trust store in NSS. Additionally, an option was added to the cacerts derivation and the `security.pki` module to blacklist specific CAs.		2016-10-09 02:00:18 +02:00
..
acme.nix	nixos.acme: make timer persistent	2016-10-03 19:31:42 +02:00
acme.xml	acme: added option security.acme.preliminarySelfsigned (#15562)	2016-06-01 11:39:46 +01:00
apparmor-suid.nix	apparmor-suid module: fix libcap lib output reference	2016-05-07 21:48:29 +02:00
apparmor.nix	nixos: add AppArmor PAM support	2015-07-15 12:40:06 +02:00
audit.nix	audit: Disable by default	2016-08-31 23:15:41 +03:00
ca.nix	cacerts: refactor, add blacklist option	2016-10-09 02:00:18 +02:00
chromium-suid-sandbox.nix	chromium-suid-sandbox module: fix description	2016-08-08 10:17:31 +03:00
duosec.nix	Fix user-facing typos (mainly in descriptions)	2014-12-30 03:31:03 +01:00
grsecurity.nix	grsecurity module: set nixpkgs.config.grsecurity = true	2016-09-05 00:56:17 +02:00
grsecurity.xml	grsecurity doc: note that module autoload hardening is disabled	2016-10-02 19:25:58 +02:00
hidepid.nix	hidepid module: detailed description to external doc	2016-09-15 15:36:03 +02:00
hidepid.xml	hidepid module: detailed description to external doc	2016-09-15 15:36:03 +02:00
oath.nix	config.security.oath: new module	2016-02-25 13:52:45 +00:00
pam.nix	Revert "nixos/pam: clean up generated files (no functional change) (#18580)"	2016-09-17 16:39:49 -05:00
pam_mount.nix	pam_mount module: integrate pam_mount into PAM of NixOS	2015-07-04 23:42:31 +02:00
pam_usb.nix	Rewrite ‘with pkgs.lib’ -> ‘with lib’	2014-04-14 16:26:48 +02:00
polkit.nix	nixos systemPackages: rework default outputs	2016-01-28 11:24:18 +01:00
prey.nix	nixos: fix some types	2015-09-18 18:48:50 +00:00
rngd.nix	rngd: update modalias to match cpu type	2016-09-17 18:36:57 -07:00
rtkit.nix	rtkit: Update from 0.10 to 0.11	2014-04-21 23:22:10 +02:00
setuid-wrapper.c	setuid-wrapper: Fix broken string comparison	2014-04-19 10:58:30 +02:00
setuid-wrappers.nix	setuid-wrappers: correctly umount the tmpfs	2016-09-04 17:56:00 +02:00
sudo.nix	sudo: Allow root to use sudo to switch groups	2016-09-13 23:15:56 +10:00