public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hardened-config: explain HARDENED_USERCOPY_FALLBACK n

Browse Source
This commit is contained in:
Joachim Fasting 2019-01-05 13:44:33 +01:00
parent dfd77a046d
commit 11840f5c70
No known key found for this signature in database
GPG Key ID: 5C204DF675C90294
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -89,7 +89,7 @@ ${optionalString (versionAtLeast version "4.13") ''
# Perform usercopy bounds checking. # Perform usercopy bounds checking.
HARDENED_USERCOPY y HARDENED_USERCOPY y
${optionalString (versionAtLeast version "4.16") '' ${optionalString (versionAtLeast version "4.16") ''
HARDENED_USERCOPY_FALLBACK n HARDENED_USERCOPY_FALLBACK n # for full whitelist enforcement
''} ''}
# Randomize allocator freelists. # Randomize allocator freelists.