diff --git a/nixos/modules/profiles/hardened.nix b/nixos/modules/profiles/hardened.nix index 8bde2e4f4984..0a0838431da7 100644 --- a/nixos/modules/profiles/hardened.nix +++ b/nixos/modules/profiles/hardened.nix @@ -55,7 +55,7 @@ with lib; # same privileges as it would have inside it. This is particularly # bad in the common case of running as root within the namespace. # - # Setting the number of allowed userns to 0 effectively disables + # Setting the number of allowed user namespaces to 0 effectively disables # the feature at runtime. Attempting to create a user namespace # with unshare will then fail with "no space left on device". boot.kernel.sysctl."user.max_user_namespaces" = mkDefault 0;