common: protect kernel image
This commit is contained in:
@@ -208,6 +208,7 @@ in {
|
|||||||
};
|
};
|
||||||
|
|
||||||
security.lockKernelModules = true;
|
security.lockKernelModules = true;
|
||||||
|
security.protectKernelImage = true;
|
||||||
|
|
||||||
security.sudo.extraConfig = let
|
security.sudo.extraConfig = let
|
||||||
sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");
|
sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");
|
||||||
|
Reference in New Issue
Block a user