felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-05-12 17:41:15 +02:00
Code Issues Projects Releases Wiki Activity

base: mitigate dirtyfrag

Browse Source
This commit is contained in:
Daniel Olsen
2026-05-08 00:55:45 +02:00
parent f2752ee9a6
commit 14994485c5
4 changed files with 38 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
base/default.nix
View File

@@ -10,6 +10,8 @@
(fp /users)
(fp /modules/snakeoil-certs.nix)
./mitigations.nix
./flake-input-exporter.nix
./networking.nix
./nix.nix

17
base/mitigations.nix Normal file
View File

@@ -0,0 +1,17 @@
{ ... }:
{
boot.blacklistedKernelModules = [
"rxrpc" # dirtyfrag
"esp6" # dirtyfrag
"esp4" # dirtyfrag
];
boot.extraModprobeConfig = ''
# dirtyfrag
install esp4 /bin/false
# dirtyfrag
install esp6 /bin/false
# dirtyfrag
install rxrpc /bin/false
'';
}