mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-23 15:33:13 +00:00
nixos-hardened: enable page alloc randomization
This commit is contained in:
parent
44d541078f
commit
4b21d1ac8c
@ -44,6 +44,9 @@ with lib;
|
||||
|
||||
# Disable legacy virtual syscalls
|
||||
"vsyscall=none"
|
||||
|
||||
# Enable page allocator randomization
|
||||
"page_alloc.shuffle=1"
|
||||
];
|
||||
|
||||
boot.blacklistedKernelModules = [
|
||||
|
Loading…
Reference in New Issue
Block a user