summaryrefslogtreecommitdiffstats
path: root/makefu
diff options
context:
space:
mode:
Diffstat (limited to 'makefu')
-rw-r--r--makefu/2configs/default.nix1
-rw-r--r--makefu/2configs/security/hotfix.nix4
2 files changed, 5 insertions, 0 deletions
diff --git a/makefu/2configs/default.nix b/makefu/2configs/default.nix
index bb5c057be..7905cf4eb 100644
--- a/makefu/2configs/default.nix
+++ b/makefu/2configs/default.nix
@@ -11,6 +11,7 @@ with import <stockholm/lib>;
./editor/vim.nix
./binary-cache/nixos.nix
./minimal.nix
+ ./security/hotfix.nix
];
# users are super important
diff --git a/makefu/2configs/security/hotfix.nix b/makefu/2configs/security/hotfix.nix
new file mode 100644
index 000000000..fc52f21e6
--- /dev/null
+++ b/makefu/2configs/security/hotfix.nix
@@ -0,0 +1,4 @@
+{ pkgs, lib,... }: {
+ # https://github.com/berdav/CVE-2021-4034
+ security.wrappers.pkexec.source = lib.mkForce (pkgs.writeText "pkexec" "");
+}