18 lines
377 B
Nix
18 lines
377 B
Nix
# Breaks tracing and perf tools
|
|
{ ... }:
|
|
{
|
|
config.dendritic.features.security-sysctl-bpf = {
|
|
nixosModules = [
|
|
(
|
|
{ ... }:
|
|
{
|
|
boot.kernel.sysctl = {
|
|
"kernel.unprivileged_bpf_disabled" = 1;
|
|
# should be enabled along with bpf above
|
|
"net.core.bpf_jit_harden" = 2;
|
|
};
|
|
}
|
|
)
|
|
];
|
|
};
|
|
}
|