gwg313/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

some updates

Browse source
This commit is contained in:
gwg313 2025-03-17 18:25:13 -04:00
parent e09709c638
commit e9adb6d552
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
6 changed files with 46 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
common/nixos/sysctl/kernel.nix
View file

@ -31,7 +31,8 @@
# - 2: only admins can use ptrace (CAP_SYS_PTRACE capability required)
# - 3: disables ptrace completely, reboot is required to re-enable ptrace
# If you need ptrace to work, then avoid non-ancestor ptrace access to running processes and their credentials, and use value "1".
"kernel.yama.ptrace_scope" = 3;
# # breaks debuggers
# "kernel.yama.ptrace_scope" = 3;
# restrict kernel logs to root only
"kernel.dmesg_restrict" = 1;