nixos/virtualbox: Revert disable hardening.
This reverts commit5d67b17901. The issues have been resolved byac603e208c. Tested this with hostonlyifs and USB support with extension pack. Conflicts: nixos/modules/programs/virtualbox-host.nix Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>
This commit is contained in:
@@ -35,7 +35,7 @@ in
|
|||||||
|
|
||||||
enableHardening = mkOption {
|
enableHardening = mkOption {
|
||||||
type = types.bool;
|
type = types.bool;
|
||||||
default = false;
|
default = true;
|
||||||
description = ''
|
description = ''
|
||||||
Enable hardened VirtualBox, which ensures that only the binaries in the
|
Enable hardened VirtualBox, which ensures that only the binaries in the
|
||||||
system path get access to the devices exposed by the kernel modules
|
system path get access to the devices exposed by the kernel modules
|
||||||
@@ -54,13 +54,6 @@ in
|
|||||||
boot.extraModulePackages = [ virtualbox ];
|
boot.extraModulePackages = [ virtualbox ];
|
||||||
environment.systemPackages = [ virtualbox ];
|
environment.systemPackages = [ virtualbox ];
|
||||||
|
|
||||||
warnings = mkIf (!cfg.enableHardening) (singleton (
|
|
||||||
"Hardening is currently disabled for VirtualBox, because of some " +
|
|
||||||
"issues in conjunction with host-only-interfaces. If you don't use " +
|
|
||||||
"hostonlyifs, it's strongly recommended to set " +
|
|
||||||
"`services.virtualboxHost.enableHardening = true'!"
|
|
||||||
));
|
|
||||||
|
|
||||||
security.setuidOwners = let
|
security.setuidOwners = let
|
||||||
mkSuid = program: {
|
mkSuid = program: {
|
||||||
inherit program;
|
inherit program;
|
||||||
|
|||||||
Reference in New Issue
Block a user