linux-hardened: Adjust config for 4.17.4

This commit is contained in:
Tim Steinbach 2018-07-03 08:35:04 -04:00
parent 37066b2aa5
commit a4d56d0635
No known key found for this signature in database
GPG Key ID: 472BFCCA96BD0EDA

View File

@ -28,7 +28,9 @@ ${optionalString (stdenv.platform.kernelArch == "x86_64") ''
# Reduce attack surface by disabling various emulations
IA32_EMULATION n
X86_X32 n
MODIFY_LDT_SYSCALL? n
${optionalString (versionOlder version "4.17") ''
MODIFY_LDT_SYSCALL? n
''}
VMAP_STACK y # Catch kernel stack overflows