common: protect kernel image

This commit is contained in:
Oystein Kristoffer Tveit 2025-03-15 00:31:02 +01:00
parent 5197de939a
commit 00c97b8da1
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146

@ -208,6 +208,7 @@ in {
};
security.lockKernelModules = true;
security.protectKernelImage = true;
security.sudo.extraConfig = let
sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");