sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

darwin: disable netbios on activation

Browse source 
We have received a notification from the German Federal Office for
Information Security (BSI) about our NetBIOS being enabled, and it
potentially being used for DDoS reflection attacks.
This commit is contained in:
zimbatm 2024-03-01 17:35:33 +01:00 • committed by Jonas Chevalier
parent f27a163625
commit 8603c1d570
1 changed files with 7 additions and 0 deletions

7
modules/darwin/common/default.nix
View file

@ -66,5 +66,12 @@
StrictModes no StrictModes no
''; '';
# Make sure to disable netbios on activation
system.activationScripts.postActivation.text = ''
echo disabling netbios... >&2
launchctl disable system/netbiosd
launchctl unload -w /System/Library/LaunchDaemons/com.apple.netbiosd.plist 2>/dev/null || true
'';
time.timeZone = "GMT"; time.timeZone = "GMT";
} }