common: protect kernel image

2025-03-15 00:31:02 +01:00
parent 5197de939a
commit 00c97b8da1
1 changed files with 1 additions and 0 deletions
--- a/hosts/common/default.nix
+++ b/hosts/common/default.nix
@@ -208,6 +208,7 @@ in {
  };

  security.lockKernelModules = true;
+  security.protectKernelImage = true;

  security.sudo.extraConfig = let
    sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");