common: enable sysrq
This commit is contained in:
@@ -205,38 +205,43 @@ in {
|
|||||||
Defaults lecture_file = ${sudoLecture}
|
Defaults lecture_file = ${sudoLecture}
|
||||||
'';
|
'';
|
||||||
|
|
||||||
boot.kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
|
boot = {
|
||||||
|
kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
|
||||||
|
loader.systemd-boot.memtest86.enable = true;
|
||||||
|
|
||||||
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/profiles/hardened.nix
|
kernel.sysctl."kernel.sysrq" = 1;
|
||||||
boot.blacklistedKernelModules = [
|
|
||||||
# Obscure network protocols
|
|
||||||
"ax25"
|
|
||||||
"netrom"
|
|
||||||
"rose"
|
|
||||||
|
|
||||||
# Old or rare or insufficiently audited filesystems
|
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/profiles/hardened.nix
|
||||||
"adfs"
|
blacklistedKernelModules = [
|
||||||
"affs"
|
# Obscure network protocols
|
||||||
"bfs"
|
"ax25"
|
||||||
"befs"
|
"netrom"
|
||||||
"cramfs"
|
"rose"
|
||||||
"efs"
|
|
||||||
# "erofs" // used by systemd
|
# Old or rare or insufficiently audited filesystems
|
||||||
"exofs"
|
"adfs"
|
||||||
"freevxfs"
|
"affs"
|
||||||
"f2fs"
|
"bfs"
|
||||||
"hfs"
|
"befs"
|
||||||
"hpfs"
|
"cramfs"
|
||||||
"jfs"
|
"efs"
|
||||||
"minix"
|
# "erofs" // used by systemd
|
||||||
"nilfs2"
|
"exofs"
|
||||||
"ntfs"
|
"freevxfs"
|
||||||
"omfs"
|
"f2fs"
|
||||||
"qnx4"
|
"hfs"
|
||||||
"qnx6"
|
"hpfs"
|
||||||
"sysv"
|
"jfs"
|
||||||
"ufs"
|
"minix"
|
||||||
];
|
"nilfs2"
|
||||||
|
"ntfs"
|
||||||
|
"omfs"
|
||||||
|
"qnx4"
|
||||||
|
"qnx6"
|
||||||
|
"sysv"
|
||||||
|
"ufs"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
hardware.bluetooth.settings = {
|
hardware.bluetooth.settings = {
|
||||||
General = {
|
General = {
|
||||||
|
Reference in New Issue
Block a user