cullmann/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

allow proper perf usage

Browse source
This commit is contained in:
Christoph Cullmann 2025-05-03 17:20:12 +02:00
parent 8ac8dd85cb
commit ed505f8e66
No known key found for this signature in database
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
share/common.nix
View file

@ -56,13 +56,14 @@ in
"kernel.dmesg_restrict" = 0; "kernel.dmesg_restrict" = 0;
# allow proper perf usage # allow proper perf usage
"kernel.perf_event_mlock_kb" = 16777216; "kernel.kptr_restrict" = 0;
"kernel.perf_event_mlock_kb" = 1024;
"kernel.perf_event_paranoid" = -1;
# harden some stuff # harden some stuff
"dev.tty.ldisc_autoload" = 0; "dev.tty.ldisc_autoload" = 0;
"fs.suid_dumpable" = 0; "fs.suid_dumpable" = 0;
"kernel.sysrq" = 0; "kernel.sysrq" = 0;
"kernel.kptr_restrict" = 2;
"kernel.unprivileged_bpf_disabled" = 1; "kernel.unprivileged_bpf_disabled" = 1;
"net.core.bpf_jit_harden" = 2; "net.core.bpf_jit_harden" = 2;
"net.ipv4.conf.all.accept_redirects" = false; "net.ipv4.conf.all.accept_redirects" = false;