cyplo/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

do not lock kernel modules for now - debugging dock

Browse source
This commit is contained in:
Cyryl Płotnicki 2020-05-08 16:31:54 +01:00
parent a337d1a0a1
commit e7aed34b2e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/security.nix
View file

@ -1,7 +1,7 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
nix.allowedUsers = [ "@users" ]; nix.allowedUsers = [ "@users" ];
security.lockKernelModules = true; security.lockKernelModules = false;
security.protectKernelImage = true; security.protectKernelImage = true;
security.forcePageTableIsolation = true; security.forcePageTableIsolation = true;
security.virtualisation.flushL1DataCache = "always"; security.virtualisation.flushL1DataCache = "always";