nixpkgs/nixos/modules/profiles
Joachim Fasting 84fb8820db
nixos/security/misc: factor out protectKernelImage
Introduces the option security.protectKernelImage that is intended to control
various mitigations to protect the integrity of the running kernel
image (i.e., prevent replacing it without rebooting).

This makes sense as a dedicated module as it is otherwise somewhat difficult
to override for hardened profile users who want e.g., hibernation to work.
2018-12-27 15:00:47 +01:00
..
all-hardware.nix usb-storage -> uas 2018-08-23 01:42:34 +00:00
base.nix Revert "zfs cannot be distributed. Disabling it in the isos." 2018-11-26 17:51:18 -05:00
clone-config.nix ova: add cloneConfigExtra option 2018-10-21 14:52:49 -05:00
demo.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-container.nix use closure-info for building system tarball 2018-11-07 12:52:53 +08:00
graphical.nix Merge pull request #47296 from matthewbauer/closure-size-reductions 2018-09-24 23:21:02 +02:00
hardened.nix nixos/security/misc: factor out protectKernelImage 2018-12-27 15:00:47 +01:00
headless.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
installation-device.nix installation-device: set GC initial heap size to 1MB 2018-10-28 10:48:00 +01:00
minimal.nix nixos: doc: fix minimal profile and installer configs 2018-09-24 21:07:59 +00:00
qemu-guest.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00