JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nixos/hardened profile: disable hibernation

Browse Source 
Recommended by KSPP
This commit is contained in:
Joachim Fasting 2017-04-30 11:57:12 +02:00
parent ffa83edf4a
commit 1dd3ba924b
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nixos/modules/profiles/hardened.nix
View File

@ -20,6 +20,9 @@ with lib;
# Disable legacy virtual syscalls # Disable legacy virtual syscalls
"vsyscall=none" "vsyscall=none"
# Disable hibernation (allows replacing the running kernel)
"nohibernate"
]; ];
# Restrict ptrace() usage to processes with a pre-defined relationship # Restrict ptrace() usage to processes with a pre-defined relationship