nixos/hardened profile: lock kernel modules

2017-04-29 22:46:20 +02:00
parent 878ad1ce6e
commit 6a5a5728ee
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/profiles/hardened.nix
+++ b/nixos/modules/profiles/hardened.nix
@@ -8,6 +8,8 @@ with lib;
 {
  security.hideProcessInformation = mkDefault true;

+  security.lockKernelModules = mkDefault true;
+
  security.apparmor.enable = mkDefault true;

  boot.kernelParams = [