From 16a3b77766ed5c703dbd5e6e37910f5924f54265 Mon Sep 17 00:00:00 2001
From: Christoph Cullmann <christoph@cullmann.io>
Date: Sun, 30 Mar 2025 17:36:27 +0200
Subject: [PATCH] harden some stuff

---
 share/common.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/share/common.nix b/share/common.nix
index a714564..48ce32f 100644
--- a/share/common.nix
+++ b/share/common.nix
@@ -62,6 +62,8 @@ in
     "kernel.perf_event_mlock_kb" = 16777216;
 
     # harden some stuff
+    "dev.tty.ldisc_autoload" = 0;
+    "fs.suid_dumpable" = 0;
     "kernel.sysrq" = 0;
     "kernel.kptr_restrict" = 2;
     "kernel.unprivileged_bpf_disabled" = 1;