From d78930d09acb46384d981c10a2f9c252a510c1c8 Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Thu, 2 May 2019 13:06:07 +0800
Subject: [PATCH] nixbld: set some security options

---
 nixbld-etc-nixos/configuration.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index ae610f1..f855372 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -87,6 +87,8 @@
     uid = 1001;
   };
   security.sudo.wheelNeedsPassword = false;
+  security.hideProcessInformation = true;
+  boot.kernel.sysctl."kernel.dmesg_restrict" = true;
   services.udev.packages = [ pkgs.openocd ];
   services.udev.extraRules = ''
 ACTION=="add", SUBSYSTEM=="tty", \