nixbld: set some security options

This commit is contained in:
Sebastien Bourdeauducq 2019-05-02 13:06:07 +08:00
parent 9805090d9e
commit d78930d09a
1 changed files with 2 additions and 0 deletions

View File

@ -87,6 +87,8 @@
uid = 1001;
};
security.sudo.wheelNeedsPassword = false;
security.hideProcessInformation = true;
boot.kernel.sysctl."kernel.dmesg_restrict" = true;
services.udev.packages = [ pkgs.openocd ];
services.udev.extraRules = ''
ACTION=="add", SUBSYSTEM=="tty", \