nixbld: set some security options

2019-05-02 13:06:07 +08:00 · 2019-05-02 13:06:07 +08:00 · d78930d09a
parent 9805090d9e
commit d78930d09a
1 changed files with 2 additions and 0 deletions
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@ -87,6 +87,8 @@
    uid = 1001;
  };
  security.sudo.wheelNeedsPassword = false;
+  security.hideProcessInformation = true;
+  boot.kernel.sysctl."kernel.dmesg_restrict" = true;
  services.udev.packages = [ pkgs.openocd ];
  services.udev.extraRules = ''
 ACTION=="add", SUBSYSTEM=="tty", \