public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux_hardened: enable slab freelist hardening

This commit is contained in:
Joachim Fasting 2017-11-15 21:39:13 +01:00
parent 1e64aa9518
commit 8ecae36963
No known key found for this signature in database
GPG Key ID: 5C204DF675C90294
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -82,6 +82,10 @@ HARDENED_USERCOPY y
# Randomize allocator freelists. # Randomize allocator freelists.
SLAB_FREELIST_RANDOM y SLAB_FREELIST_RANDOM y
${optionalString (versionAtLeast version "4.14") ''
SLAB_FREELIST_HARDENED y
''}
# Wipe higher-level memory allocations on free() with page_poison=1 # Wipe higher-level memory allocations on free() with page_poison=1
PAGE_POISONING y PAGE_POISONING y
PAGE_POISONING_NO_SANITY y PAGE_POISONING_NO_SANITY y