Tom Fitzhenry 725777250b nixos/shadow: introduce security.shadow.enable ...

Allow users to disable the shadow authentication suite.

My primary motivation is to reduce the attack surface via setuid
binaries, which shadow understandably introduces many. I realised,
however, that I don't use any of these.

The test demonstrates login working without needing the shadow suite.

2024-06-11 19:28:32 +10:00

1.4 KiB

Raw Blame History

View Raw