nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 04:50:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

nixos/fcgiwrap: add security advisory links to messages

Browse Source
This commit is contained in:
euxane
2024-08-31 17:15:42 +02:00
parent fee11ef959
commit 8931f18bfa
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/cgit.nix
View File

@@ -178,7 +178,7 @@ in
warnings = flatten (flip mapAttrsToList cfgs (inst: cfg:
optional (cfg.user == "root") ''
`services.cgit.${inst}` is configured to run as root.
This has security implications: <TODO: advisory link>.
This has security implications. See advisory: https://discourse.nixos.org/t/51419
It is recommended to set an unprivileged user explicitly.
This default user will be set to "cgit" in NixOS 24.11.
''

2
nixos/modules/services/web-servers/fcgiwrap.nix
View File

@@ -11,7 +11,7 @@ let
'';
securityWarning = ''
The fcgiwrap module is configured with a global shared instance.
This has security implications: <TODO: advisory link>.
This has security implications. See advisory: https://discourse.nixos.org/t/51419
Isolated instances should instead be configured through `services.fcgiwrap.instances.*'.
The global options at `services.fcgiwrap.*` will be removed in NixOS 24.11.
'';