From 6a7f02d89debadceaddd91ea3b9deb059597a927 Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Sat, 24 Nov 2018 15:13:03 +0100 Subject: nixos/hardened: restrict access to nix daemon --- nixos/modules/profiles/hardened.nix | 2 ++ 1 file changed, 2 insertions(+) (limited to 'nixos/modules/profiles') diff --git a/nixos/modules/profiles/hardened.nix b/nixos/modules/profiles/hardened.nix index d712fb2514b1..61e871bcaca5 100644 --- a/nixos/modules/profiles/hardened.nix +++ b/nixos/modules/profiles/hardened.nix @@ -12,6 +12,8 @@ with lib; boot.kernelPackages = mkDefault pkgs.linuxPackages_hardened; + nix.allowedUsers = mkDefault [ "@users" ]; + security.hideProcessInformation = mkDefault true; security.lockKernelModules = mkDefault true; -- cgit v1.2.3