cullmann/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

harden some stuff

Browse source
This commit is contained in:
Christoph Cullmann 2025-03-30 17:26:25 +02:00
parent 6d91f31027
commit 98bfe91812
No known key found for this signature in database
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
share/common.nix
View file

@ -60,6 +60,12 @@ in
# allow proper perf usage
"kernel.perf_event_mlock_kb" = 16777216;
# harden some stuff
"kernel.sysrq" = 0;
"kernel.kptr_restrict" = 2;
"kernel.unprivileged_bpf_disabled" = 1;
"net.core.bpf_jit_harden" = 2;
};
# Use the systemd-boot EFI boot loader.