common: enable sysrq

This commit is contained in:
2025-03-14 22:50:11 +01:00
parent 881c5f3633
commit 80668c0fd3

View File

@@ -205,38 +205,43 @@ in {
Defaults lecture_file = ${sudoLecture} Defaults lecture_file = ${sudoLecture}
''; '';
boot.kernelPackages = lib.mkDefault pkgs.linuxPackages_latest; boot = {
kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
loader.systemd-boot.memtest86.enable = true;
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/profiles/hardened.nix kernel.sysctl."kernel.sysrq" = 1;
boot.blacklistedKernelModules = [
# Obscure network protocols
"ax25"
"netrom"
"rose"
# Old or rare or insufficiently audited filesystems # https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/profiles/hardened.nix
"adfs" blacklistedKernelModules = [
"affs" # Obscure network protocols
"bfs" "ax25"
"befs" "netrom"
"cramfs" "rose"
"efs"
# "erofs" // used by systemd # Old or rare or insufficiently audited filesystems
"exofs" "adfs"
"freevxfs" "affs"
"f2fs" "bfs"
"hfs" "befs"
"hpfs" "cramfs"
"jfs" "efs"
"minix" # "erofs" // used by systemd
"nilfs2" "exofs"
"ntfs" "freevxfs"
"omfs" "f2fs"
"qnx4" "hfs"
"qnx6" "hpfs"
"sysv" "jfs"
"ufs" "minix"
]; "nilfs2"
"ntfs"
"omfs"
"qnx4"
"qnx6"
"sysv"
"ufs"
];
};
hardware.bluetooth.settings = { hardware.bluetooth.settings = {
General = { General = {