public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux-hardened: Adjust config for 4.17.4

Browse Source
This commit is contained in:
Tim Steinbach 2018-07-03 08:35:04 -04:00
parent 37066b2aa5
commit a4d56d0635
No known key found for this signature in database
GPG Key ID: 472BFCCA96BD0EDA
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -28,7 +28,9 @@ ${optionalString (stdenv.platform.kernelArch == "x86_64") ''
# Reduce attack surface by disabling various emulations # Reduce attack surface by disabling various emulations
IA32_EMULATION n IA32_EMULATION n
X86_X32 n X86_X32 n
MODIFY_LDT_SYSCALL? n ${optionalString (versionOlder version "4.17") ''
MODIFY_LDT_SYSCALL? n
''}
VMAP_STACK y # Catch kernel stack overflows VMAP_STACK y # Catch kernel stack overflows