nixos/hardened: use graphene-hardened malloc by default
This commit is contained in:
parent
a84be28270
commit
48ff4f1197
|
@ -14,6 +14,8 @@ with lib;
|
|||
|
||||
nix.allowedUsers = mkDefault [ "@users" ];
|
||||
|
||||
environment.memoryAllocator.provider = mkDefault "graphene-hardened";
|
||||
|
||||
security.hideProcessInformation = mkDefault true;
|
||||
|
||||
security.lockKernelModules = mkDefault true;
|
||||
|
|
Loading…
Reference in a new issue