diff --git a/hosts/common/default.nix b/hosts/common/default.nix
index 96c9ecf..5dd9d56 100644
--- a/hosts/common/default.nix
+++ b/hosts/common/default.nix
@@ -206,6 +206,8 @@ in {
     };
   };
 
+  security.lockKernelModules = true;
+
   security.sudo.extraConfig = let
     sudoLecture = pkgs.writeText "sudo-lecture.txt" (extendedLib.termColors.front.red "Be careful or something, idk...\n");
   in ''