diff options
| author | makefu <github@syntax-fehler.de> | 2019-02-05 22:31:39 +0100 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2019-02-05 22:31:39 +0100 |
| commit | a9ec59e87d65c1f72f346e0568a542715502576f (patch) | |
| tree | c50f29688cc9ffe6ab0d00cf1d3ce0706b5b3bfb /lass/2configs/hardening.nix | |
| parent | 80c2ab739d2d51bf47b07fd6f39508a85077b0e6 (diff) | |
| parent | 932d11ed9346fbef640604d1107be39e7c11be85 (diff) | |
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'lass/2configs/hardening.nix')
| -rw-r--r-- | lass/2configs/hardening.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/lass/2configs/hardening.nix b/lass/2configs/hardening.nix new file mode 100644 index 000000000..aee4bf06f --- /dev/null +++ b/lass/2configs/hardening.nix @@ -0,0 +1,11 @@ +{ pkgs, lib, ... }: +with lib; +{ + security.chromiumSuidSandbox.enable = true; + security.lockKernelModules = false; + boot.kernel.sysctl."user.max_user_namespaces" = 63414; + + imports = [ + <nixpkgs/nixos/modules/profiles/hardened.nix> + ]; +} |