oh boy i sure love making security holes in my os

flake.lock

@@ -413,11 +413,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772845525,
-        "narHash": "sha256-Dp5Ir2u4jJDGCgeMRviHvEQDe+U37hMxp6RSNOoMMPc=",
+        "lastModified": 1772985285,
+        "narHash": "sha256-wEEmvfqJcl9J0wyMgMrj1TixOgInBW/6tLPhWGoZE3s=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "27b93804fbef1544cb07718d3f0a451f4c4cd6c0",
+        "rev": "5be5d8245cbc7bc0c09fbb5f38f23f223c543f85",
         "type": "github"
       },
       "original": {
@@ -502,10 +502,10 @@
     "kernel-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1772838933,
-        "narHash": "sha256-77MlrOVBethsi2wbq0eQx+m6AzNoBWCD8b82B1yUX04=",
+        "lastModified": 1772925668,
+        "narHash": "sha256-P+xf11gGIe+VnHVS/vx13ejgevEsTjZ14I6AdMgMzio=",
         "ref": "drm-tip",
-        "rev": "fce8d7fb2107068c269b868d51aba5f9cf85998a",
+        "rev": "f705e865254996e9a099a22a9320e523e6debdcf",
         "shallow": true,
         "type": "git",
         "url": "https://gitlab.freedesktop.org/drm/tip.git"
@@ -642,11 +642,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772341813,
-        "narHash": "sha256-/PQ0ubBCMj/MVCWEI/XMStn55a8dIKsvztj4ZVLvUrQ=",
+        "lastModified": 1772945408,
+        "narHash": "sha256-PMt48sEQ8cgCeljQ9I/32uoBq/8t8y+7W/nAZhf72TQ=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "a2051ff239ce2e8a0148fa7a152903d9a78e854f",
+        "rev": "1c1d8ea87b047788fd7567adf531418c5da321ec",
         "type": "github"
       },
       "original": {

flake.nix

@@ -221,6 +221,13 @@
                     }
                   ];
                 };
+                wrappers.gdb-ptrace = {
+                  owner = "root";
+                  group = "wheel";
+                  permissions = "u+rx,g+rx,o-rwx";
+                  capabilities = "cap_sys_ptrace+ep";
+                  source = "${pkgs.gdb}/bin/gdb";
+                };
               };
               programs = {
                 # ccache = {

home.nix

@@ -143,6 +143,7 @@
         </interface>
       '';
     };
+    sessionPath = [ "/run/wrappers/bin" ];
   };
   xdg = {
     configFile."xfce4/helpers.rc".text = ''
@@ -441,7 +442,7 @@
       settings = {
         model = "gpt-5.4";
         approval_policy = "on-request";
-        model_reasoning_effort = "medium";
+        model_reasoning_effort = "high";
       };
     };
     # command-not-found.enable = true;