nixos/malloc: set vm.max_map_count when using graphene-hardened

2023-03-28 10:18:20 +00:00 · 2023-03-28 10:18:20 +00:00 · a76bd96e4b
commit a76bd96e4b
parent 4361baa782
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/config/malloc.nix
+++ b/nixos/modules/config/malloc.nix
@ -97,6 +97,7 @@ in
  };

  config = mkIf (cfg.provider != "libc") {
+    boot.kernel.sysctl."vm.max_map_count" = mkIf (cfg.provider == "graphene-hardened") (mkDefault 1048576);
    environment.etc."ld-nix.so.preload".text = ''
      ${providerLibPath}
    '';