-
-
Notifications
You must be signed in to change notification settings - Fork 18.6k
Create a "high security" profile #20161
Copy link
Copy link
Closed
Labels
0.kind: enhancementAdd something new or improve an existing system.Add something new or improve an existing system.1.severity: securityIssues which raise a security issue, or PRs that fix oneIssues which raise a security issue, or PRs that fix one
Description
Metadata
Metadata
Assignees
Labels
0.kind: enhancementAdd something new or improve an existing system.Add something new or improve an existing system.1.severity: securityIssues which raise a security issue, or PRs that fix oneIssues which raise a security issue, or PRs that fix one
Fields
Give feedbackNo fields configured for issues without a type.
This is an easy way to reduce the barrier to creating a secure NixOS system.
It could include such things as:
also, optionally networking layers in separate contains such as:
and then use iptables to route all traffic through those containers.