public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux_*_hardened: don't set VMAP_STACK

Browse Source 
This has been on by default upstream for as long as it's been an option.
This commit is contained in:
Emily 2020-04-05 05:28:38 +01:00
parent 7d5352df31
commit 3d4c8ae901
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -22,7 +22,6 @@ optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
# Note: this config depends on EXPERT y and so will not take effect, hence # Note: this config depends on EXPERT y and so will not take effect, hence
# it is left "optional" for now. # it is left "optional" for now.
MODIFY_LDT_SYSCALL = option no; MODIFY_LDT_SYSCALL = option no;
VMAP_STACK = yes; # Catch kernel stack overflows
# Randomize position of kernel and memory. # Randomize position of kernel and memory.
RANDOMIZE_BASE = yes; RANDOMIZE_BASE = yes;