Something went wrong. Try again.
What happens if I push all of nixpkgs
Something went wrong. Try again.
Nix
123456789101112131415161718192021222324252627282930313233343536373839{ config, lib, ... }:let cfg = config.security;in{ options = { security.lsm = lib.mkOption { type = lib.types.listOf lib.types.str; default = [ ]; description = '' A list of the LSMs to initialize in order. ''; }; };
config = lib.mkMerge [ { # We set the default LSM's here due to them not being present if set when enabling AppArmor. security.lsm = [ "landlock" "yama" "bpf" ]; } (lib.mkIf (lib.lists.length cfg.lsm > 0) { assertions = [ { assertion = builtins.length (lib.filter (lib.hasPrefix "security=") config.boot.kernelParams) == 0; message = "security parameter in boot.kernelParams cannot be used when security.lsm is used"; } ];
boot.kernelParams = [ "lsm=${lib.concatStringsSep "," cfg.lsm}" ]; }) ];}