From 4e7f7a5b652ad6676fbbc796c25ab6a47a111950 Mon Sep 17 00:00:00 2001
From: Craige McWhirter <craige@mcwhirter.io>
Date: Tue, 31 May 2022 13:19:49 +1000
Subject: [PATCH] server_common: disable udisks2 which enables polkit

---
 profiles/server_common.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/profiles/server_common.nix b/profiles/server_common.nix
index 27b649a..4b11832 100644
--- a/profiles/server_common.nix
+++ b/profiles/server_common.nix
@@ -16,6 +16,6 @@
     withUtempter = true;
   };
 
-  # avoid CVE-2021-4034 (PwnKit)
-  security.polkit.enable = false;
+  security.polkit.enable = false; # avoid CVE-2021-4034 (PwnKit)
+  services.udisks2.enable = false; # disable udisks2 which enables polkit
 }