!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

369 Members
Discussions around Security | Triaging happens in #security:nixos.org125 Servers

Load older messages


SenderMessageTime
20 Aug 2022
@hexa:lossy.networkhexaa station is a client connecting to a BSS22:46:13
@v0id:nltrix.net@v0id:nltrix.netso local is the local access to station, network is a client access a station, adjacent maybe rel to mesh networks or smthg.22:48:34
@v0id:nltrix.net@v0id:nltrix.netinteresting.22:49:10
@v0id:nltrix.net@v0id:nltrix.netor it is just auth usr vs unauth user. diff.22:51:03
@hexa:lossy.networkhexawifi direct or mesh, yeah23:06:21
@hexa:lossy.networkhexare adjacent23:06:28
21 Aug 2022
@hrnz:vegan.im.ithrnz changed their display name from uk (mainline zfs when) to hrnz.00:00:13
@greaka:greaka.degreaka changed their display name from greaka ⚡️ to greaka .09:25:58
@aktaboot:tchncs.deaktaboot https://github.com/NixOS/nixpkgs/issues/12036 13:24:06
@aktaboot:tchncs.deaktabootwould this be very hard to do ? 🤔13:24:34
@sandro:supersandro.deSandro 🐧

From the linked website:

These goals are complementary to Mandatory Access Control(MAC) protections provided by LSM modules, such as SElinux and Smack, which, depending on policy, can attempt to protect file integrity.

and selinux does currently not work with nix.

15:43:20
@aktaboot:tchncs.deaktaboot
In reply to @sandro:supersandro.de

From the linked website:

These goals are complementary to Mandatory Access Control(MAC) protections provided by LSM modules, such as SElinux and Smack, which, depending on policy, can attempt to protect file integrity.

and selinux does currently not work with nix.

oh I didn't know that, thanks :)
15:51:05
@aktaboot:tchncs.deaktabootis there no Issue about SELinux not working with nix ?16:20:04
@andreas.schraegle:helsinki-systems.de@andreas.schraegle:helsinki-systems.de
In reply to @aktaboot:tchncs.de
is there no Issue about SELinux not working with nix ?
https://github.com/NixOS/nix/pull/2670
16:20:39
@aktaboot:tchncs.deaktabootthanks16:20:57
@aktaboot:tchncs.deaktabooti was searching in nixpkgs for some reason16:23:10
22 Aug 2022
@j-k:matrix.orgj-ksee also https://github.com/NixOS/rfcs/pull/41#issuecomment-54377796608:11:00
23 Aug 2022
@hexa:lossy.networkhexahosting your own gitlab really feels like a libability some days00:34:12
@hexa:lossy.networkhexa

A vulnerability in GitLab CE/EE affecting all versions starting from 11.3.4 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. This is a Critical severity issue (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, 9.9).

00:34:41
@winterqt:nixos.devWinter (she/her) How does that even happen
Can't wait to look at the patch
00:44:06
@callmeecho:matrix.orgEcho joined the room.00:49:48
@sandro:supersandro.deSandro 🐧And they consistently score very high with the CVEs00:50:53
@winterqt:nixos.devWinter (she/her)Updating GitLab now03:01:44
@winterqt:nixos.devWinter (she/her)I really should subscribe to their RSS feed or something, missed 15.3.0 releasing.03:01:58
@winterqt:nixos.devWinter (she/her)And apparently everyone else did too :(03:02:05
@winterqt:nixos.devWinter (she/her)Update: https://github.com/NixOS/nixpkgs/pull/187946#issuecomment-122351681704:21:52
@winterqt:nixos.devWinter (she/her)ActiveRecord 😖04:22:16
@winterqt:nixos.devWinter (she/her)Ahhh, figured it out.04:25:08
24 Aug 2022
@fabaff:matrix.orgFabian Affolter joined the room.06:11:42
@tinybronca:sibnsk.netunderpantsgnome changed their display name from tinybronca to underpantsgnome.23:01:37

Show newer messages


Back to Room ListRoom Version: 9