oysteikt/nix-dotfiles
oysteikt/nix-dotfiles
2
1
Fork 0
Code Issues Pull Requests Activity

common: disable a bunch of kernel modules by default

Browse Source
This commit is contained in:
Oystein Kristoffer Tveit 2024-12-02 08:25:20 +01:00
parent 387ff505b5
commit f9d175fc43
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146
1 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
hosts/common/default.nix
View File

@ -195,4 +195,35 @@ in {
Defaults lecture = always
Defaults lecture_file = ${sudoLecture}
'';
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/profiles/hardened.nix
boot.blacklistedKernelModules = [
# Obscure network protocols
"ax25"
"netrom"
"rose"
# Old or rare or insufficiently audited filesystems
"adfs"
"affs"
"bfs"
"befs"
"cramfs"
"efs"
# "erofs" // used by systemd
"exofs"
"freevxfs"
"f2fs"
"hfs"
"hpfs"
"jfs"
"minix"
"nilfs2"
"ntfs"
"omfs"
"qnx4"
"qnx6"
"sysv"
"ufs"
];
}