nixos-config/system/hardened.nix

19 lines
568 B
Nix

{ config, modulesPath, pkgs, lib, ... }:
with lib; {
imports = [ "${modulesPath}/profiles/hardened.nix" ];
# @TODO hardened kernel causes Bluetooth issues
boot.kernelPackages = mkOverride 900 pkgs.linuxPackages;
# Xbox Controller not working via Bluetooth if enabled
security.lockKernelModules = mkOverride 900 false;
boot.loader.systemd-boot.editor = mkDefault false;
# scudo causes Firefox & Tor Browser segfaults
environment.memoryAllocator.provider = mkOverride 900 "libc";
security.allowSimultaneousMultithreading = mkOverride 900 true;
}