nixos/hardened: use graphene-hardened malloc by default

2019-04-23 22:21:40 +02:00
parent a84be28270
commit 48ff4f1197
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/profiles/hardened.nix
+++ b/nixos/modules/profiles/hardened.nix
@@ -14,6 +14,8 @@ with lib;

  nix.allowedUsers = mkDefault [ "@users" ];

+  environment.memoryAllocator.provider = mkDefault "graphene-hardened";
+
  security.hideProcessInformation = mkDefault true;

  security.lockKernelModules = mkDefault true;