Configuration for my NixOS based systems and Home Manager
Protect against copyfail
+8
+8
common.nix
+8
common.nix
···
39
39
];
40
40
trusted-users = [ "@wheel" ];
41
41
};
42
+
# protect against the copy fail exploit by blacklisting the affected kernel modules
43
+
boot.blacklistedKernelModules = [
44
+
"af_alg"
45
+
"algif_hash"
46
+
"algif_skcipher"
47
+
"algif_rng"
48
+
"algif_aead"
49
+
];
42
50
43
51
# I don't care that much about free vs unfree
44
52
nixpkgs.config.allowUnfree = true;