Joachim Fasting ea4f371627 nixos/security/misc: expose SMT control option ... For the hardened profile disable symmetric multi threading. There seems to be no *proven* method of exploiting cache sharing between threads on the same CPU core, so this may be considered quite paranoid, considering the perf cost. SMT can be controlled at runtime, however. This is in keeping with OpenBSD defaults. TODO: since SMT is left to be controlled at runtime, changing the option definition should take effect on system activation. Write to /sys/devices/system/cpu/smt/control		2018-12-27 15:00:49 +01:00
..
wrappers
acme.nix
acme.xml
apparmor-suid.nix
apparmor.nix
audit.nix
auditd.nix
ca.nix
chromium-suid-sandbox.nix
dhparams.nix
duosec.nix
google_oslogin.nix	config.security.googleOsLogin: add module	2018-12-21 17:52:37 +01:00
hidepid.nix
hidepid.xml
lock-kernel-modules.nix
misc.nix	nixos/security/misc: expose SMT control option	2018-12-27 15:00:49 +01:00
oath.nix
pam.nix
pam_mount.nix
pam_usb.nix
polkit.nix
prey.nix
rngd.nix
rtkit.nix
sudo.nix