felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-05-12 17:41:15 +02:00
Code Issues Projects Releases Wiki Activity

base/hardening: move hardening options from base/default

Browse Source
This commit is contained in:
h7x4
2026-05-08 16:17:23 +09:00
parent 86ca8dcdc3
commit baeb1e5e60
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
base/default.nix
View File

@@ -71,8 +71,6 @@
fi fi
''; '';
# security.lockKernelModules = true;
security.protectKernelImage = true;
security.sudo.execWheelOnly = true; security.sudo.execWheelOnly = true;
security.sudo.extraConfig = '' security.sudo.extraConfig = ''
Defaults lecture = never Defaults lecture = never

3
base/hardening.nix
View File

@@ -58,4 +58,7 @@
"nfc" "nfc"
"soundwire" "soundwire"
]; ];
# security.lockKernelModules = true;
security.protectKernelImage = true;
} }