From e7aed34b2e4ff2809d37f0a31f28a75f35bab652 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cyryl=20P=C5=82otnicki?= <cyplo@cyplo.net>
Date: Fri, 8 May 2020 16:31:54 +0100
Subject: [PATCH] do not lock kernel modules for now - debugging dock

---
 nixos/security.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/security.nix b/nixos/security.nix
index 98a56b90..c38d33f7 100644
--- a/nixos/security.nix
+++ b/nixos/security.nix
@@ -1,7 +1,7 @@
 { config, pkgs, ... }:
 {
   nix.allowedUsers = [ "@users" ];
-  security.lockKernelModules = true;
+  security.lockKernelModules = false;
   security.protectKernelImage = true;
   security.forcePageTableIsolation = true;
   security.virtualisation.flushL1DataCache = "always";