13 lines
272 B
Nix
13 lines
272 B
Nix
_: {
|
|
security = {
|
|
unprivilegedUsernsClone = false;
|
|
forcePageTableIsolation = true;
|
|
allowSimultaneousMultithreading = false;
|
|
protectKernelImage = true;
|
|
lockKernelModules = true;
|
|
|
|
virtualisation = {
|
|
flushL1DataCache = "always";
|
|
};
|
|
};
|
|
}
|