guix/gnu/services
Leo Famulari 898489f48e
services: Enable "protected hardlinks" and "protected symlinks" by default.
References:

https://sysctl-explorer.net/fs/protected_hardlinks/
https://sysctl-explorer.net/fs/protected_symlinks/

* gnu/services/sysctl.scm (%default-sysctl-settings): New public variable.
(<sysctl-configuration>): Use %default-sysctl-settings as the default value.
* gnu/services/base.scm (%base-services): Add sysctl-service-type.
* doc/guix.texi (Miscellaneous Services): Document the new defaults.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-18 12:17:33 +01:00
..
admin.scm
audio.scm services: mpd: Make /var/run/mpd/USER user-owned. 2020-12-06 23:18:08 +01:00
auditd.scm
authentication.scm services: Prevent following symlinks during activation. 2021-03-10 18:01:47 +01:00
avahi.scm services: avahi: Depend on 'user-processes'. 2020-12-09 14:13:32 +01:00
base.scm services: Enable "protected hardlinks" and "protected symlinks" by default. 2021-03-18 12:17:33 +01:00
certbot.scm
cgit.scm
configuration.scm
cuirass.scm services: cuirass: Remove simple cuirass configuration. 2021-03-10 09:05:02 +01:00
cups.scm services: Prevent following symlinks during activation. 2021-03-10 18:01:47 +01:00
databases.scm gnu: Remove MongoDB. 2021-03-16 11:05:24 +01:00
dbus.scm services: Prevent following symlinks during activation. 2021-03-10 18:01:47 +01:00
desktop.scm
dict.scm
dns.scm services: Prevent following symlinks during activation. 2021-03-10 18:01:47 +01:00
docker.scm
file-sharing.scm services: Add transmission-daemon service. 2021-02-12 15:11:36 +08:00
games.scm
ganeti.scm
getmail.scm
guix.scm services: guix-build-coordinator: Add dynamic auth with file record. 2021-03-05 09:29:58 +00:00
herd.scm
hurd.scm
kerberos.scm
linux.scm gnu: Remove 'file-systems requirement from kernel-module-loader. 2021-02-08 03:34:40 +01:00
lirc.scm
mail.scm services: Add radicale-service-type. 2020-12-27 19:32:09 +01:00
mcron.scm
messaging.scm
monitoring.scm prometheus-node-exporter: Support extra options. 2020-12-07 09:08:33 +00:00
networking.scm services: tor: Add control-socket? option. 2021-02-22 10:03:02 -05:00
nfs.scm gnu: services: Fix the NFS service. 2021-02-05 17:19:10 -05:00
nix.scm services: nix: Move nix.conf generation to etc-service-type. 2020-12-06 17:48:48 +08:00
pam-mount.scm
pm.scm
rsync.scm
science.scm services: science.scm: Add missing copyright headers. 2020-12-09 12:55:02 +02:00
sddm.scm
security-token.scm gnu: htop: Update to 3.0.3. 2020-12-13 00:35:49 +01:00
shepherd.scm services: shepherd: Make 'assert-valid-graph' public. 2021-03-03 14:19:26 +01:00
sound.scm
spice.scm
ssh.scm Revert "services: openssh: Warn about 'password-authentication?' default." 2020-12-11 19:06:53 +01:00
syncthing.scm services: Add syncthing service. 2021-01-12 14:40:36 +03:00
sysctl.scm services: Enable "protected hardlinks" and "protected symlinks" by default. 2021-03-18 12:17:33 +01:00
telephony.scm
version-control.scm
virtualization.scm services/qemu-binfmt: Use the F flag and the static output of QEMU. 2021-03-15 18:00:35 -04:00
vpn.scm services: wireguard: New service. 2021-02-17 10:32:15 +01:00
web.scm services: Add Agate Gemini service. 2021-02-15 13:35:04 +01:00
xorg.scm services: Add 'xorg-server-service-type'. 2021-02-11 17:01:43 +08:00