From 42c58cd2e8a7f414efebeadc9d182d4aa11d282e Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Fri, 5 May 2017 11:55:39 +0200 Subject: [PATCH] linux_hardened: compile with stackprotector-strong Default is regular, which we need to unset for kconfig to accept the new value. --- pkgs/os-specific/linux/kernel/hardened-config.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/os-specific/linux/kernel/hardened-config.nix b/pkgs/os-specific/linux/kernel/hardened-config.nix index a85725d70e1..c54ee0e5aff 100644 --- a/pkgs/os-specific/linux/kernel/hardened-config.nix +++ b/pkgs/os-specific/linux/kernel/hardened-config.nix @@ -32,6 +32,9 @@ PAGE_POISONING y PAGE_POISONING_NO_SANITY y PAGE_POISONING_ZERO y +CC_STACKPROTECTOR_REGULAR n +CC_STACKPROTECTOR_STRONG y + # Stricter /dev/mem STRICT_DEVMEM y IO_STRICT_DEVMEM y