From 47842e2bbbe2afdce226d6ff37895357c8f65d77 Mon Sep 17 00:00:00 2001
From: Christoph Cullmann <christoph@cullmann.io>
Date: Tue, 27 Aug 2024 19:52:10 +0200
Subject: no need to replace the kernel at runtime

---
 share/common.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/share/common.nix b/share/common.nix
index b91fcb0..f2310c1 100644
--- a/share/common.nix
+++ b/share/common.nix
@@ -198,6 +198,9 @@ in
   # allow realtime
   security.rtkit.enable = true;
 
+  # no need to replace the kernel at runtime
+  security.protectKernelImage = true;
+
   # package manager config
   nix = {
     # auto optimize the store
-- 
cgit v1.2.3