work around CVE-2024-23342 for pkgs hwi, trezor

This commit is contained in:
Erik Arvstedt 2025-11-22 12:58:19 +01:00
parent c4cd252753
commit e6e3a13dbb
No known key found for this signature in database
GPG key ID: 33312B944DD97846
4 changed files with 20 additions and 2 deletions

View file

@ -62,7 +62,7 @@ in {
});
})
(mkIf cfg.trezor {
environment.systemPackages = [ pkgs.python3.pkgs.trezor ];
environment.systemPackages = [ config.nix-bitcoin.pkgs.pyPkgs.nbPython3PackagesWithUnlockedEcdsa.trezor ];
# Don't use rules from nixpkgs because we want to use our own group.
services.udev.packages = lib.singleton (pkgs.writeTextFile {
name = "trezord-udev-rules";