[nixos/server] protect kernel image

pSub · Jun 11, 2024 · e145fb2 · e145fb2
1 parent cd94d14
commit e145fb2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nixos/server/configuration.nix b/nixos/server/configuration.nix
@@ -223,6 +223,8 @@ in  {
         SHA_CRYPT_MAX_ROUNDS = 640000;
       };
 
+      security.protectKernelImage = lib.mkDefault true;
+
       security.auditd.enable = true;
       security.audit.enable = true;
       security.audit.rules = [