newell
/
nix-scripts
forked from M-Labs/nix-scripts
1
0
Fork 0
Code Pull Requests Activity

nixbld: set some security options

This commit is contained in:
Sebastien Bourdeauducq 2019-05-02 13:06:07 +08:00
parent 9805090d9e
commit d78930d09a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixbld-etc-nixos/configuration.nix
View File

@ -87,6 +87,8 @@
uid = 1001; uid = 1001;
}; };
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
security.hideProcessInformation = true;
boot.kernel.sysctl."kernel.dmesg_restrict" = true;
services.udev.packages = [ pkgs.openocd ]; services.udev.packages = [ pkgs.openocd ];
services.udev.extraRules = '' services.udev.extraRules = ''
ACTION=="add", SUBSYSTEM=="tty", \ ACTION=="add", SUBSYSTEM=="tty", \