foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-30 22:57:55 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

nixos/profiles/hardened: remove hardened kernel

Browse Source 
We'll place it at the host-level instead.
This commit is contained in:
Gabriel Arazas 2024-12-28 14:52:52 +08:00
parent 6d8060f768
commit 84e4c6a9a5
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/nixos/profiles/hardened.nix
View File

@ -10,10 +10,6 @@
# Don't replace it mid-way! DON'T TURN LEFT!!!!
security.protectKernelImage = true;
# Hardened config equals hardened kernel equals hardened co--approval from the
# security-minded people.
boot.kernelPackages = lib.mkOverride 500 pkgs.linuxKernel.packages.linux_6_6_hardened;
# Disable system console entirely. We don't need it so get rid of it.
boot.kernel.sysctl."kernel.sysrq" = 0;
}