4 Commits

Author	SHA1	Message	Date
Lin Jian	759ec1113d	nixos/network-interfaces: stop wrapping ping with cap_net_raw ... From systemd 243 release note[1]: This release enables unprivileged programs (i.e. requiring neither setuid nor file capabilities) to send ICMP Echo (i.e. ping) requests by turning on the "net.ipv4.ping_group_range" sysctl of the Linux kernel for the whole UNIX group range, i.e. all processes. So this wrapper is not needed any more. See also [2] and [3]. This patch also removes: - apparmor profiles in NixOS for ping itself and the wrapped one - other references for the wrapped ping [1]: 8e2d9d40b3/NEWS (L6457-L6464) [2]: https://github.com/systemd/systemd/pull/13141 [3]: https://fedoraproject.org/wiki/Changes/EnableSysctlPingGroupRange	2023-09-21 16:52:16 +08:00
figsoda	6bb0dbf91f	nixos: fix typos	2022-12-17 19:31:14 -05:00
Alex Wied	4d269d11e3	nixos/doc: Fix typo in activation-script.md	2022-06-28 17:46:16 -04:00
Janne Heß	8d925cc8db	nixos/doc: Document the activation script ... This may be helpful to new module developers, curious users, and people who just need a reference without having to look at the implementation	2022-02-09 20:44:28 +01:00