On 06/05/2014 06:21 PM, Luca Bruno wrote: > I'd like to propose a system.securityUpdates = [ pkg1 pkg2 ... ] which > will be taken in account by system.build.toplevel automatically, > so that security updates can be easily specified in configuration.nix, > instead of messing with the command line. Sounds nice.