diff --git a/share/common.nix b/share/common.nix
index a714564..48ce32f 100644
--- a/share/common.nix
+++ b/share/common.nix
@@ -62,6 +62,8 @@ in
     "kernel.perf_event_mlock_kb" = 16777216;
 
     # harden some stuff
+    "dev.tty.ldisc_autoload" = 0;
+    "fs.suid_dumpable" = 0;
     "kernel.sysrq" = 0;
     "kernel.kptr_restrict" = 2;
     "kernel.unprivileged_bpf_disabled" = 1;