linux: make SECURITY_LOCKDOWN_LSM optional
Not supported on kernels <5.4
This commit is contained in:
parent
1cce663933
commit
a438a94d32
@ -424,7 +424,7 @@ let
|
|||||||
MODULE_SIG = no; # r13y, generates a random key during build and bakes it in
|
MODULE_SIG = no; # r13y, generates a random key during build and bakes it in
|
||||||
# Depends on MODULE_SIG and only really helps when you sign your modules
|
# Depends on MODULE_SIG and only really helps when you sign your modules
|
||||||
# and enforce signatures which we don't do by default.
|
# and enforce signatures which we don't do by default.
|
||||||
SECURITY_LOCKDOWN_LSM = no;
|
SECURITY_LOCKDOWN_LSM = option no;
|
||||||
} // optionalAttrs (!stdenv.hostPlatform.isAarch32) {
|
} // optionalAttrs (!stdenv.hostPlatform.isAarch32) {
|
||||||
|
|
||||||
# Detect buffer overflows on the stack
|
# Detect buffer overflows on the stack
|
||||||
|
Loading…
x
Reference in New Issue
Block a user