index
:
nixpkgs
add-beancount-ing-diba
add-cargo-espflash
add-cargo-feature-set
add-dodo
add-ghostie
add-iceportal
add-kdash
add-ldproxy
add-nemu
add-notifymuch
add-openbbterminal
add-swappy
add-vim-plugins
backport/update-python-pscript
cargo-espflash-license
cargo-public-api
fix-node-exporter-backslash-in-exec
fix-node-exporter-backslash-in-exec-tmp
init-cjson
init-fbcat
init-pdfium
init-prometheus-mpd-exporter
init-tageditor
init-tpm2-tss-engine
init-unused
master
mdbook-toc
nixos-22.11
submitting-changes-gitrm
update-bison
update-gitlint
update-libquotient
update-mdbook-open-on-gh
update-mutt
update-python-pscript
update-rust-analyzer
update-some-packages
update-tageditor
update-tasknc
update-tig
update-toot
update-ugrep
update-wordgrinder
update-zellij
updates
Contrib clone of nixpkgs
matthias
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
nixos
/
modules
/
profiles
/
hardened.nix
Age
Commit message (
Expand
)
Author
2022-01-26
nixos/nix-daemon: use structural settings
polykernel
2021-04-23
nixos/apparmor: disable killUnconfinedConfinables by default
Julien Moutinho
2021-02-21
nixos/hidepid: drop the module as the hidepid mount option is broken
Dominik Xaver Hörl
2021-01-04
profiles/hardened: Add note about potential instability
talyz
2020-09-27
nixos/hardened: update blacklisted filesystems
TredwellGit
2020-08-25
nixos/security/misc: add option unprivilegedUsernsClone
Izorkin
2020-04-17
nixos/hardened: add emily to maintainers
Emily
2020-04-17
nixos/hardened: enable user namespaces for root
Emily
2020-04-17
nixos/hardened: don't set vm.unprivileged_userfaultfd
Emily
2020-04-17
nixos/hardened: don't set vm.mmap_min_addr
Emily
2020-04-17
nixos/hardened: don't set vm.mmap_rnd{,_compat}_bits
Emily
2020-04-17
nixos/hardened: don't set net.core.bpf_jit_harden
Emily
2020-04-17
nixos/hardened: don't set kernel.unprivileged_bpf_disabled
Emily
2020-04-17
nixos/hardened: don't set kernel.dmesg_restrict
Emily
2020-04-17
nixos/hardened: don't set vsyscall=none
Emily
2020-04-17
nixos/hardened: don't set slab_nomerge
Emily
2020-04-05
Revert "nixos/hardened: build sandbox incompatible with namespaces"
Florian Klink
2019-11-26
nixos/hardened: scudo default allocator. zero by default allow override.
Kyle Copperfield
2019-11-19
nixos/hardened: build sandbox incompatible with namespaces
Kyle Copperfield
2019-10-12
nixos/hardened: blacklist old filesystems (#70482)
Joachim F
2019-08-19
Merge pull request #66687 from joachifm/feat/hardened-nixos-revert-graphene-m...
Marek Mahut
2019-08-18
nixos/systemd: install sysctl snippets
Florian Klink
2019-08-15
Revert "nixos/hardened: use graphene-hardened malloc by default"
Joachim Fasting
2019-08-15
nixos-hardened: disable unprivileged userfaultfd syscalls
Joachim Fasting
2019-08-15
nixos-hardened: enable page alloc randomization
Joachim Fasting
2019-07-30
nixos/hardened: make pti=on overridable
Pierre Bourdon
2019-07-19
Renaming security.virtualization.flushL1DataCache to virtualisation
Marek Mahut
2019-07-04
nixos/hardened: harder inet defaults
Joachim Fasting
2019-07-04
nixos/hardened: disable ftrace by default
Joachim Fasting
2019-05-07
nixos/hardened: use graphene-hardened malloc by default
Joachim Fasting
2019-01-05
nixos/hardened profile: always enable pti
Joachim Fasting
2019-01-05
nixos/hardened profile: slab/slub hardening
Joachim Fasting
2018-12-27
nixos/security/misc: expose SMT control option
Joachim Fasting
2018-12-27
nixos/security/misc: expose l1tf mitigation option
Joachim Fasting
2018-12-27
nixos/security/misc: factor out protectKernelImage
Joachim Fasting
2018-11-24
nixos/hardened: restrict access to nix daemon
Joachim Fasting
2018-10-15
Merge pull request #48439 from joachifm/hardened-misc
Joachim F
2018-10-15
nixos/security/misc: init
Joachim Fasting
2018-10-15
nixos/hardened: add myself to maintainers
Joachim Fasting
2018-07-20
[bot] nixos/*: remove unused arguments in lambdas
volth
2017-09-09
nixos/hardened: blacklist a few obscure net protocols
Joachim Fasting
2017-09-09
nixos/hardened: set mmap_min_addr
Joachim Fasting
2017-08-13
nixos/hardened profile: increase ASLR entropy
Joachim Fasting
2017-06-22
nixos: replaced "userns" with "user namespaces" for clarity
André-Patrick Bubel
2017-04-30
nixos/hardened profile: disable user namespaces at runtime
Joachim Fasting
2017-04-30
nixos/hardened profile: disable hibernation
Joachim Fasting
2017-04-30
nixos/hardened profile: use the linux_hardened kernel
Joachim Fasting
2017-04-30
nixos/hardened profile: lock kernel modules
Joachim Fasting
2017-04-29
nixos/hardened profile: disable legacy virtual syscalls
Joachim Fasting
2017-04-23
nixos: add a "hardened" profile
Joachim Fasting