do not lock kernel modules for now - debugging dock

This commit is contained in:
Cyryl Płotnicki 2020-05-08 16:31:54 +01:00
parent a337d1a0a1
commit e7aed34b2e

View file

@ -1,7 +1,7 @@
{ config, pkgs, ... }:
{
nix.allowedUsers = [ "@users" ];
security.lockKernelModules = true;
security.lockKernelModules = false;
security.protectKernelImage = true;
security.forcePageTableIsolation = true;
security.virtualisation.flushL1DataCache = "always";