grsecurity doc: note that module autoload hardening is disabled

2016-10-02 19:16:07 +02:00
parent 9a9237e0aa
commit 98e2b90cf3
1 changed files with 4 additions and 0 deletions
--- a/nixos/modules/security/grsecurity.xml
+++ b/nixos/modules/security/grsecurity.xml
@@ -149,6 +149,10 @@

        <listitem><para>Trusted path execution: a desirable feature, but
        requires some more work to operate smoothly on NixOS.</para></listitem>
+
+        <listitem><para>Module hardening: would break user initiated module
+        loading. Might enable this at some point, depending on the potential
+        breakage.</para></listitem>
      </itemizedlist>
    </para></listitem>