common: lock kernel modules

This commit is contained in:
Oystein Kristoffer Tveit 2025-03-14 23:26:45 +01:00
parent 21187f3fb8
commit ac657c4a82
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146

@ -206,6 +206,8 @@ in {
};
};
security.lockKernelModules = true;
security.sudo.extraConfig = let
sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");
in ''