diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2019-07-04 18:50:48 +0200 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2019-07-04 19:24:41 +0200 |
| commit | c233e24d54bc1681f9001fcdf7adc0c91aea5609 (patch) | |
| tree | 6cf884052816e8b39ec3947fa4bc66cf105db5b0 /nixos/modules/profiles | |
| parent | 44b6999614477ef66684267b4473d8253d3c2f76 (diff) | |
nixos/hardened: disable ftrace by default
Diffstat (limited to 'nixos/modules/profiles')
| -rw-r--r-- | nixos/modules/profiles/hardened.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/modules/profiles/hardened.nix b/nixos/modules/profiles/hardened.nix index 87bf66333c61..af0dd8471c72 100644 --- a/nixos/modules/profiles/hardened.nix +++ b/nixos/modules/profiles/hardened.nix @@ -89,4 +89,7 @@ with lib; # # The value is taken from the KSPP recommendations (Debian uses 4096). boot.kernel.sysctl."vm.mmap_min_addr" = mkDefault 65536; + + # Disable ftrace debugging + boot.kernel.sysctl."kernel.ftrace_enabled" = mkDefault false; } |