From ed505f8e667e3310f15542f66c9f547d98a8cc4a Mon Sep 17 00:00:00 2001
From: Christoph Cullmann <christoph@cullmann.io>
Date: Sat, 3 May 2025 17:20:12 +0200
Subject: [PATCH] allow proper perf usage

---
 share/common.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/share/common.nix b/share/common.nix
index 1cdf3a4..db6b26b 100644
--- a/share/common.nix
+++ b/share/common.nix
@@ -56,13 +56,14 @@ in
     "kernel.dmesg_restrict" = 0;
 
     # allow proper perf usage
-    "kernel.perf_event_mlock_kb" = 16777216;
+    "kernel.kptr_restrict" = 0;
+    "kernel.perf_event_mlock_kb" = 1024;
+    "kernel.perf_event_paranoid" = -1;
 
     # harden some stuff
     "dev.tty.ldisc_autoload" = 0;
     "fs.suid_dumpable" = 0;
     "kernel.sysrq" = 0;
-    "kernel.kptr_restrict" = 2;
     "kernel.unprivileged_bpf_disabled" = 1;
     "net.core.bpf_jit_harden" = 2;
     "net.ipv4.conf.all.accept_redirects" = false;