diff --git a/nixos/security.nix b/nixos/security.nix index 6ec0c68c..98a56b90 100644 --- a/nixos/security.nix +++ b/nixos/security.nix @@ -1,15 +1,12 @@ { config, pkgs, ... }: { nix.allowedUsers = [ "@users" ]; - environment.memoryAllocator.provider = "scudo"; - environment.variables.SCUDO_OPTIONS = "ZeroContents=1"; security.lockKernelModules = true; security.protectKernelImage = true; security.forcePageTableIsolation = true; security.virtualisation.flushL1DataCache = "always"; security.apparmor.enable = true; boot.kernelParams = [ - "slub_debug=FZP" "page_poison=1" "page_alloc.shuffle=1" ];