summaryrefslogtreecommitdiffstats
path: root/nixos/modules/profiles
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2019-08-15 18:48:38 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2019-08-15 18:49:57 +0200
commit4ead3d2ec3d4fac9ee22da47bbe3bc9defb62c49 (patch)
treed60bac99dc2d8bf4be967315b93a0d4de5b1a6a4 /nixos/modules/profiles
parentda0b67c94650b4fc934316f958ddcc4e95d774bd (diff)
Revert "nixos/hardened: use graphene-hardened malloc by default"
This reverts commit 48ff4f119735dc60c3e2794a71b00757b838d877. Causes too much breakage to be enabled by default [1][2]. [1]: https://github.com/NixOS/nixpkgs/issues/61489 [2]: https://github.com/NixOS/nixpkgs/issues/65000
Diffstat (limited to 'nixos/modules/profiles')
-rw-r--r--nixos/modules/profiles/hardened.nix2
1 files changed, 0 insertions, 2 deletions
diff --git a/nixos/modules/profiles/hardened.nix b/nixos/modules/profiles/hardened.nix
index 3ff9a2b4fde0..b748a7c296df 100644
--- a/nixos/modules/profiles/hardened.nix
+++ b/nixos/modules/profiles/hardened.nix
@@ -14,8 +14,6 @@ with lib;
nix.allowedUsers = mkDefault [ "@users" ];
- environment.memoryAllocator.provider = mkDefault "graphene-hardened";
-
security.hideProcessInformation = mkDefault true;
security.lockKernelModules = mkDefault true;