grsecurity: make GRKERNSEC y and PAX y implicit

These options should always be specified. Note, an implication of this change is that not specifying any grsec/PaX options results in a build failure.
2016-10-02 18:30:15 +02:00
parent a58f5ffbb9
commit 1bb7b44cd7
4 changed files with 5 additions and 8 deletions
--- a/nixos/modules/security/grsecurity.xml
+++ b/nixos/modules/security/grsecurity.xml
@@ -208,8 +208,6 @@
        let
          kernel = pkgs.linux_grsec_nixos.override {
            extraConfig = ''
-              GRKERNSEC y
-              PAX y
              GRKERNSEC_CONFIG_AUTO y
              GRKERNSEC_CONFIG_SERVER y
              GRKERNSEC_CONFIG_SECURITY y