nixos/systemd: move default sysctls from coredump module

The default systemd sysctl snippet contains various security‐relevant
settings, it is however only installed if systemd.coredump.enable is
enabled, despite these settings not being strictly related to
systemd-coredump.
This commit is contained in:
Mikael Voss
2026-03-10 11:11:54 +01:00
parent a39f00c078
commit 1ee2f0b0ca
2 changed files with 2 additions and 2 deletions
+2
View File
@@ -667,6 +667,8 @@ in
"systemd/system-environment-generators/env-generator".source =
"${config.system.nixos-init.package}/bin/env-generator";
"sysctl.d/50-default.conf".source = "${cfg.package}/example/sysctl.d/50-default.conf";
};
services.dbus.enable = true;
@@ -67,8 +67,6 @@ in
}}"
];
};
"sysctl.d/50-default.conf".source = "${systemd}/example/sysctl.d/50-default.conf";
};
users.users.systemd-coredump = {