1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-23 06:01:15 +00:00
nixpkgs/nixos/modules
Alexey Shmalko fa4fe71105
docker: fix socket permissions
Docker socket is world writable. This means any user on the system is
able to invoke docker command. (Which is equal to having a root access
to the machine.)

This commit makes socket group-writable and owned by docker group.

Inspired by
https://github.com/docker/docker/blob/master/contrib/init/systemd/docker.socket
2017-04-03 09:05:37 -04:00
..
config update-users-groups.pl: Keep track of deallocated UIDs/GIDs 2017-03-29 18:13:18 +02:00
hardware Merge pull request #17303 from peterhoeg/iio 2017-03-14 11:16:09 +08:00
i18n/input-method Remove top-level kde5 attribute 2017-02-27 11:49:10 -06:00
installer channel.nix: Use filterSource to exclude unnecessary files from nixpkgs 2017-03-25 01:42:28 +02:00
misc fcron: 3.1.2 -> 3.2.1 2017-03-05 22:41:11 +01:00
profiles nixos: fix renaming warning in graphical profile 2017-03-03 07:27:41 -06:00
programs nixos/treewide: systemd.time is in manvolume 7 2017-03-21 08:28:53 +01:00
security acme: Use chown -R for challenges directory. Fixes #24529. 2017-04-01 15:22:01 +02:00
services sshd.nix: Alternative fix for #19589 2017-03-31 16:18:58 +02:00
system initrd-ssh: Use initrd secrets for host keys 2017-04-02 16:33:37 -04:00
tasks network-interfaces: reload bridges on conf changes 2017-03-26 18:47:43 +02:00
testing kdm: drop service 2017-02-11 13:55:09 -05:00
virtualisation docker: fix socket permissions 2017-04-03 09:05:37 -04:00
module-list.nix quagga service: disable 2017-03-30 16:23:33 +02:00
rename.nix Merge branch 'master' into staging 2017-03-23 13:31:28 +01:00