Lyndon Sanche 89e8ed8f0c automatic-timezoned: Harden systemd services ...

automatic-timezoned and automatic-timezoned-geoclue-agent both only need
to talk to geoclue and timedated over Dbus. We can lock them down to
only the bare requirements needed for this functionality.

`systemd-analyze security` scores are at 0.8, down from 9.2 and 8.8,
respectively.

Assisted-by: Claude Sonnet 5

2026-10-02 12:26:22 -06:00

..

cachix-agent

teams/cachix: drop

2026-01-11 17:12:23 +01:00

kerberos

nixos/*: remove unused let bindings

2026-05-01 20:39:14 -04:00

automatic-timezoned.nix

automatic-timezoned: Harden systemd services

2026-10-02 12:26:22 -06:00

bpftune.nix

bpftune: 0-unstable-2025-03-20 → 0.4-2

2026-02-11 23:02:08 +05:30

cachix-watch-store.nix

teams/cachix: drop

2026-01-11 17:12:23 +01:00

cloud-init.nix

…

dbus.nix

nixos/dbus: switch default implementation to dbus-broker

2026-04-21 12:58:13 +02:00

earlyoom.nix

lib/cli: deprecate toGNUCommandLine

2025-10-21 21:01:38 +02:00

localtimed.nix

…

nix-daemon-firewall.nix

nixos: remove optional builtins prefixes from prelude functions

2026-01-15 16:07:55 +01:00

nix-daemon.nix

nixos/nix: Support local-only store (#536721)

2026-08-05 17:05:53 +00:00

nohang.nix

nixos/nohang: init module

2025-12-29 13:04:07 +02:00

nscd.conf

…

nscd.nix

…

nvme-rs.nix

nixos/nvme-rs: init

2025-09-27 08:44:52 +02:00

saslauthd.nix

…

self-deploy.nix

services.self-deploy: fix nix-build argument format

2025-11-18 02:13:55 -05:00

swapspace.nix

…

systembus-notify.nix

…

systemd-lock-handler.md

treewide: run treefmt with mdcr/nixfmt

2025-07-24 13:52:31 +02:00

systemd-lock-handler.nix

…

uptimed.nix

…

userborn.nix

nixos/userborn: manage /etc/sub{u,g}id

2026-08-15 00:15:29 +02:00

zram-generator.nix

nixos/zram-generator: do not restart on switch

2026-03-28 08:11:29 +01:00