refactor: update hardened.nix

This commit is contained in:
Felix Schröter 2023-05-31 17:02:01 +02:00
parent e492b3e295
commit c79c125e4c
Signed by: felschr
GPG key ID: 671E39E6744C807D

View file

@ -3,13 +3,16 @@
with lib; { with lib; {
imports = [ "${modulesPath}/profiles/hardened.nix" ]; imports = [ "${modulesPath}/profiles/hardened.nix" ];
# @TODO hardened kernel causes Bluetooth issues
boot.kernelPackages = mkOverride 900 pkgs.linuxPackages;
# Xbox Controller not working via Bluetooth if enabled # Xbox Controller not working via Bluetooth if enabled
security.lockKernelModules = mkOverride 0 false; security.lockKernelModules = mkOverride 900 false;
boot.loader.systemd-boot.editor = mkDefault false; boot.loader.systemd-boot.editor = mkDefault false;
# scudo causes Firefox & Tor Browser segfaults # scudo causes Firefox & Tor Browser segfaults
environment.memoryAllocator.provider = "libc"; environment.memoryAllocator.provider = mkOverride 900 "libc";
security.allowSimultaneousMultithreading = mkOverride 0 true; security.allowSimultaneousMultithreading = mkOverride 900 true;
} }