nixos/hardened profile: disable hibernation

Recommended by KSPP
2017-04-30 12:06:11 +02:00
parent ffa83edf4a
commit 1dd3ba924b
1 changed files with 3 additions and 0 deletions
@@ -20,6 +20,9 @@ with lib;

    # Disable legacy virtual syscalls
    "vsyscall=none"
+
+    # Disable hibernation (allows replacing the running kernel)
+    "nohibernate"
  ];

  # Restrict ptrace() usage to processes with a pre-defined relationship