nix: avoid CVE-2021-4034 (PwnKit)
This commit is contained in:
parent
9d3fcc1552
commit
8f51d7e2ea
|
@ -62,10 +62,10 @@
|
||||||
"homepage": "https://github.com/NixOS/nixpkgs",
|
"homepage": "https://github.com/NixOS/nixpkgs",
|
||||||
"owner": "NixOS",
|
"owner": "NixOS",
|
||||||
"repo": "nixpkgs",
|
"repo": "nixpkgs",
|
||||||
"rev": "604c44137d97b5111be1ca5c0d97f6e24fbc5c2c",
|
"rev": "b3d86c56c786ad9530f1400adbd4dfac3c42877b",
|
||||||
"sha256": "0gzhigyn8f7vps4a5vc1c8wbim59724s179a7d0h3gv6ss9avdj4",
|
"sha256": "09nslcjdgwwb6j9alxrsnq1wvhifq1nmzl2w02l305j0wsmgdial",
|
||||||
"type": "tarball",
|
"type": "tarball",
|
||||||
"url": "https://github.com/NixOS/nixpkgs/archive/604c44137d97b5111be1ca5c0d97f6e24fbc5c2c.tar.gz",
|
"url": "https://github.com/NixOS/nixpkgs/archive/b3d86c56c786ad9530f1400adbd4dfac3c42877b.tar.gz",
|
||||||
"url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
|
"url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
|
||||||
},
|
},
|
||||||
"nixpkgsUnstable": {
|
"nixpkgsUnstable": {
|
||||||
|
|
|
@ -15,4 +15,7 @@
|
||||||
withUtempter = true;
|
withUtempter = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# avoid CVE-2021-4034 (PwnKit)
|
||||||
|
security.polkit.enable = false;
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue