Some logical re-grouping

2025-12-20 23:49:56 -07:00
parent 5e27cd814f
commit a7674f6c1d
3 changed files with 16 additions and 17 deletions
--- a/modules/security.nix
+++ b/modules/security.nix
@@ -35,6 +35,16 @@
    { domain = "*"; type = "hard"; item = "core"; value = "0"; }
  ];

+  boot.kernelParams = [
+    "slab_nomerge"
+    "init_on_alloc=1"
+    "init_on_free=1"
+    "page_alloc.shuffle=1"
+    "randomize_kstack_offset=on"
+    "vsyscall=none"
+    "mitigations=auto"
+  ];
+
  boot.kernel.sysctl = {
    "kernel.dmesg_restrict" = 1;
    "kernel.kptr_restrict" = 2;