From 33add1d75631ae2bd1c7711c43ab195f6c237fbe Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Mon, 28 Jan 2019 23:02:48 +0100
Subject: l mors.r: hardening

---
 lass/2configs/hardening.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 lass/2configs/hardening.nix

(limited to 'lass/2configs')

diff --git a/lass/2configs/hardening.nix b/lass/2configs/hardening.nix
new file mode 100644
index 00000000..aee4bf06
--- /dev/null
+++ b/lass/2configs/hardening.nix
@@ -0,0 +1,11 @@
+{ pkgs, lib, ... }:
+with lib;
+{
+  security.chromiumSuidSandbox.enable = true;
+  security.lockKernelModules = false;
+  boot.kernel.sysctl."user.max_user_namespaces" = 63414;
+
+  imports = [
+    <nixpkgs/nixos/modules/profiles/hardened.nix>
+  ];
+}
-- 
cgit v1.2.3