diff options
| author | jeschli <jeschli@gmail.com> | 2019-01-29 19:17:43 +0100 |
|---|---|---|
| committer | jeschli <jeschli@gmail.com> | 2019-01-29 19:17:43 +0100 |
| commit | 924c8fb748a92720c75750cee528ac2f4b7c5c8e (patch) | |
| tree | 1a3b956f7f8527e533040cee1138810fe304bbc9 /lass/2configs/hardening.nix | |
| parent | 06b6454af78e8236a67d69cab94f62c32054be47 (diff) | |
| parent | e64bbd8d6864e21f9e7b6b9a11cf95c976bdc109 (diff) | |
Merge branch 'master' of prism.r:stockholm
Diffstat (limited to 'lass/2configs/hardening.nix')
| -rw-r--r-- | lass/2configs/hardening.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/lass/2configs/hardening.nix b/lass/2configs/hardening.nix new file mode 100644 index 000000000..aee4bf06f --- /dev/null +++ b/lass/2configs/hardening.nix @@ -0,0 +1,11 @@ +{ pkgs, lib, ... }: +with lib; +{ + security.chromiumSuidSandbox.enable = true; + security.lockKernelModules = false; + boot.kernel.sysctl."user.max_user_namespaces" = 63414; + + imports = [ + <nixpkgs/nixos/modules/profiles/hardened.nix> + ]; +} |