aires/nix-configuration
aires/nix-configuration
1
0
Fork 0
Code Actions Activity

Security: disable cups-browsed due to CVE

Browse source
This commit is contained in:
Aires 2024-09-28 01:07:47 -04:00
parent 8dbd4b4b69
commit 31a2504bea
2 changed files with 18 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
flake.lock
View file

@ -252,11 +252,11 @@
}, },
"nixos-hardware": { "nixos-hardware": {
"locked": { "locked": {
"lastModified": 1727040444, "lastModified": 1727437159,
"narHash": "sha256-19FNN5QT9Z11ZUMfftRplyNN+2PgcHKb3oq8KMW/hDA=", "narHash": "sha256-v4qLwEw5OmprgQZTT7KZMNU7JjXJzRypw8+Cw6++fWk=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixos-hardware", "repo": "nixos-hardware",
"rev": "d0cb432a9d28218df11cbd77d984a2a46caeb5ac", "rev": "d830ad47cc992b4a46b342bbc79694cbd0e980b2",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -300,11 +300,11 @@
}, },
"nixpkgs-unstable": { "nixpkgs-unstable": {
"locked": { "locked": {
"lastModified": 1727122398, "lastModified": 1727348695,
"narHash": "sha256-o8VBeCWHBxGd4kVMceIayf5GApqTavJbTa44Xcg5Rrk=", "narHash": "sha256-J+PeFKSDV+pHL7ukkfpVzCOO7mBSrrpJ3svwBFABbhI=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "30439d93eb8b19861ccbe3e581abf97bdc91b093", "rev": "1925c603f17fc89f4c8f6bf6f631a802ad85d784",
"type": "github" "type": "github"
}, },
"original": { "original": {

14
modules/ui/desktops/common.nix
View file

@ -78,8 +78,18 @@ in
# Enable touchpad support (enabled by default in most desktop managers, buuuut just in case). # Enable touchpad support (enabled by default in most desktop managers, buuuut just in case).
libinput.enable = true; libinput.enable = true;
# Enable printing support. # Enable printing support, but disable browsed per .
printing.enable = true; printing = {
enable = true;
# FIXME: Once this option's available, uncomment it and remove the `systemd.services.cups-browsed` section below.
# browsed.enable = false;
};
};
# Disable broswed per https://discourse.nixos.org/t/cups-cups-filters-and-libppd-security-issues/52780
systemd.services.cups-browsed = {
enable = false;
unitConfig.Mask = true;
}; };
# Support for AppImage files # Support for AppImage files