modules/boot: lock kernel modules

Defelo · Defelo · commit 54ef36ce404c · 2026-05-09T22:40:17.000+02:00
diff --git a/modules/boot.nix b/modules/boot.nix
@@ -9,4 +9,6 @@
   console.enable = false;
 
   boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  security.lockKernelModules = true;
 }

Original file line number	Diff line number	Diff line change
`@@ -9,4 +9,6 @@`
`9`	`9`	`console.enable = false;`
`10`	`10`
`11`	`11`	`boot.kernelPackages = pkgs.linuxPackages_latest;`
	`12`	`+`
	`13`	`+ security.lockKernelModules = true;`
`12`	`14`	`}`