common: lock kernel modules

2025-03-14 23:26:45 +01:00
parent 21187f3fb8
commit ac657c4a82
1 changed files with 2 additions and 0 deletions
--- a/hosts/common/default.nix
+++ b/hosts/common/default.nix
@@ -206,6 +206,8 @@ in {
    };
  };

+  security.lockKernelModules = true;
+
  security.sudo.extraConfig = let
    sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");
  in ''