nixos-hardened: enable page alloc randomization

This commit is contained in:
Joachim Fasting 2019-08-15 18:24:24 +02:00
parent 44d541078f
commit 4b21d1ac8c
No known key found for this signature in database
GPG Key ID: 5C204DF675C90294

View File

@ -44,6 +44,9 @@ with lib;
# Disable legacy virtual syscalls
"vsyscall=none"
# Enable page allocator randomization
"page_alloc.shuffle=1"
];
boot.blacklistedKernelModules = [