summary refs log tree commit diff
path: root/nixos/modules/profiles/hardened.nix
Commit message (Expand)AuthorAge
* Revert "nixos/hardened: build sandbox incompatible with namespaces"Florian Klink2020-04-05
* nixos/hardened: scudo default allocator. zero by default allow override.Kyle Copperfield2019-11-26
* nixos/hardened: build sandbox incompatible with namespacesKyle Copperfield2019-11-19
* nixos/hardened: blacklist old filesystems (#70482)Joachim F2019-10-12
* Merge pull request #66687 from joachifm/feat/hardened-nixos-revert-graphene-m...Marek Mahut2019-08-19
|\
| * Revert "nixos/hardened: use graphene-hardened malloc by default"Joachim Fasting2019-08-15
* | nixos/systemd: install sysctl snippetsFlorian Klink2019-08-18
|/
* nixos-hardened: disable unprivileged userfaultfd syscallsJoachim Fasting2019-08-15
* nixos-hardened: enable page alloc randomizationJoachim Fasting2019-08-15
* nixos/hardened: make pti=on overridablePierre Bourdon2019-07-30
* Renaming security.virtualization.flushL1DataCache to virtualisationMarek Mahut2019-07-19
* nixos/hardened: harder inet defaultsJoachim Fasting2019-07-04
* nixos/hardened: disable ftrace by defaultJoachim Fasting2019-07-04
* nixos/hardened: use graphene-hardened malloc by defaultJoachim Fasting2019-05-07
* nixos/hardened profile: always enable ptiJoachim Fasting2019-01-05
* nixos/hardened profile: slab/slub hardeningJoachim Fasting2019-01-05
* nixos/security/misc: expose SMT control optionJoachim Fasting2018-12-27
* nixos/security/misc: expose l1tf mitigation optionJoachim Fasting2018-12-27
* nixos/security/misc: factor out protectKernelImageJoachim Fasting2018-12-27
* nixos/hardened: restrict access to nix daemonJoachim Fasting2018-11-24
* Merge pull request #48439 from joachifm/hardened-miscJoachim F2018-10-15
|\
| * nixos/security/misc: initJoachim Fasting2018-10-15
* | nixos/hardened: add myself to maintainersJoachim Fasting2018-10-15
|/
* [bot] nixos/*: remove unused arguments in lambdasvolth2018-07-20
* nixos/hardened: blacklist a few obscure net protocolsJoachim Fasting2017-09-09
* nixos/hardened: set mmap_min_addrJoachim Fasting2017-09-09
* nixos/hardened profile: increase ASLR entropyJoachim Fasting2017-08-13
* nixos: replaced "userns" with "user namespaces" for clarityAndré-Patrick Bubel2017-06-22
* nixos/hardened profile: disable user namespaces at runtimeJoachim Fasting2017-04-30
* nixos/hardened profile: disable hibernationJoachim Fasting2017-04-30
* nixos/hardened profile: use the linux_hardened kernelJoachim Fasting2017-04-30
* nixos/hardened profile: lock kernel modulesJoachim Fasting2017-04-30
* nixos/hardened profile: disable legacy virtual syscallsJoachim Fasting2017-04-29
* nixos: add a "hardened" profileJoachim Fasting2017-04-23
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-08 07:52:26 +0000