security.forcePageTableIsolation
NixOS option
Whether to force-enable the Page Table Isolation (PTI) Linux kernel feature even on CPU models that claim to be safe from Meltdown. This hardening feature is most beneficial to systems that run untrusted workloads that rely on address space isolation for security.
type: booleanDefault
declared in: nixos/modules/security/misc.nixView source on NixOS/nixpkgs →false