public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/apparmor: disable killUnconfinedConfinables by default

Browse Source
This commit is contained in:
Julien Moutinho
2021-04-23 07:20:20 +02:00
parent 76887d750b
commit b42a0e205d
3 changed files with 21 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/profiles/hardened.nix
+1
View File
@@ -36,6 +36,7 @@ with lib;
security.virtualisation.flushL1DataCache = mkDefault "always";
security.apparmor.enable = mkDefault true;
security.apparmor.killUnconfinedConfinables = mkDefault true;
boot.kernelParams = [
# Slab/slub sanity checks, redzoning, and poisoning