diff options
Diffstat (limited to 'nixos/doc/manual/configuration/profiles/hardened.xml')
| -rw-r--r-- | nixos/doc/manual/configuration/profiles/hardened.xml | 14 |
1 files changed, 3 insertions, 11 deletions
diff --git a/nixos/doc/manual/configuration/profiles/hardened.xml b/nixos/doc/manual/configuration/profiles/hardened.xml index dc83fc837e2a..2cb23f6d5d0a 100644 --- a/nixos/doc/manual/configuration/profiles/hardened.xml +++ b/nixos/doc/manual/configuration/profiles/hardened.xml @@ -6,19 +6,11 @@ <title>Hardened</title> <para> - A profile with most (vanilla) hardening options enabled by default, - potentially at the cost of features and performance. + A profile with most (vanilla) hardening options enabled by default, potentially at the cost of features and performance. </para> <para> - This includes a hardened kernel, and limiting the system information - available to processes through the <filename>/sys</filename> and - <filename>/proc</filename> filesystems. It also disables the User Namespaces - feature of the kernel, which stops Nix from being able to build anything - (this particular setting can be overriden via - <xref linkend="opt-security.allowUserNamespaces"/>). See the - <literal - xlink:href="https://github.com/nixos/nixpkgs/tree/master/nixos/modules/profiles/hardened.nix"> - profile source</literal> for further detail on which settings are altered. + This includes a hardened kernel, and limiting the system information available to processes through the <filename>/sys</filename> and <filename>/proc</filename> filesystems. It also disables the User Namespaces feature of the kernel, which stops Nix from being able to build anything (this particular setting can be overriden via <xref linkend="opt-security.allowUserNamespaces"/>). See the <literal + xlink:href="https://github.com/nixos/nixpkgs/tree/master/nixos/modules/profiles/hardened.nix"> profile source</literal> for further detail on which settings are altered. </para> </section> |