aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-05 17:27:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Hardening] Add sbctl to system packages

Browse source 
Not really useful yet
This commit is contained in:
Antoine Viallon 2023-05-05 11:50:18 +02:00
parent c07db9ae09
commit 17180722c1
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hardening.nix
View file

@ -108,6 +108,9 @@ in
(optional cfg.expensive "-a exit,always -F arch=b64 -S execve")
];
environment.systemPackages = with pkgs; [
sbctl # Secure Boot keys generation
];
systemd.services.dbus.serviceConfig = mkIf cfg.services.dbus {
# Hardening