cyplo/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use normal memory allocator as scudo crashes firefox

Browse source
This commit is contained in:
Cyryl Płotnicki 2020-05-02 20:27:05 +01:00
parent b99106d422
commit 8a3e117d7e
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nixos/security.nix
View file

@ -1,15 +1,12 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
nix.allowedUsers = [ "@users" ]; nix.allowedUsers = [ "@users" ];
environment.memoryAllocator.provider = "scudo";
environment.variables.SCUDO_OPTIONS = "ZeroContents=1";
security.lockKernelModules = true; security.lockKernelModules = true;
security.protectKernelImage = true; security.protectKernelImage = true;
security.forcePageTableIsolation = true; security.forcePageTableIsolation = true;
security.virtualisation.flushL1DataCache = "always"; security.virtualisation.flushL1DataCache = "always";
security.apparmor.enable = true; security.apparmor.enable = true;
boot.kernelParams = [ boot.kernelParams = [
"slub_debug=FZP"
"page_poison=1" "page_poison=1"
"page_alloc.shuffle=1" "page_alloc.shuffle=1"
]; ];