summary refs log tree commit diff
path: root/nixos/modules/security
diff options
context:
space:
mode:
authorMartin Weinelt <mweinelt@users.noreply.github.com>2023-10-20 00:57:55 +0200
committerGitHub <noreply@github.com>2023-10-20 00:57:55 +0200
commitd042a296139c6a111be3e3d5dc9ef6783b5e7c16 (patch)
tree4ced7f46c1e8fc4b4f6d14208e038c7f1b6f6041 /nixos/modules/security
parent9f27f8b28ee45597d113498db0ee0d726f2b74a2 (diff)
parent759ec1113d0a1d6315b38bd83ec3562dacc08238 (diff)
downloadnixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar.gz
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar.bz2
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar.lz
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar.xz
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.tar.zst
nixpkgs-d042a296139c6a111be3e3d5dc9ef6783b5e7c16.zip
Merge pull request #253764 from linj-fork/fix-ping-wrapper
nixos/network-interfaces: stop wrapping ping with cap_net_raw
Diffstat (limited to 'nixos/modules/security')
-rw-r--r--nixos/modules/security/apparmor/profiles.nix6
1 files changed, 0 insertions, 6 deletions
diff --git a/nixos/modules/security/apparmor/profiles.nix b/nixos/modules/security/apparmor/profiles.nix
index 8eb630b5a48..0bf90a00865 100644
--- a/nixos/modules/security/apparmor/profiles.nix
+++ b/nixos/modules/security/apparmor/profiles.nix
@@ -2,10 +2,4 @@
 let apparmor = config.security.apparmor; in
 {
 config.security.apparmor.packages = [ pkgs.apparmor-profiles ];
-config.security.apparmor.policies."bin.ping".profile = lib.mkIf apparmor.policies."bin.ping".enable ''
-  include "${pkgs.iputils.apparmor}/bin.ping"
-  include "${pkgs.inetutils.apparmor}/bin.ping"
-  # Note that including those two profiles in the same profile
-  # would not work if the second one were to re-include <tunables/global>.
-'';
 }