grsecurity: ensure that PaX ELF markings are enabled

The upstream default is to enable only xattr markings, breaking the paxmarks facility.
2016-05-02 07:27:29 +02:00 · 2016-05-02 07:27:29 +02:00 · a69501a936
parent 7893cb1aea
commit a69501a936
1 changed files with 4 additions and 0 deletions
--- a/pkgs/build-support/grsecurity/default.nix
+++ b/pkgs/build-support/grsecurity/default.nix
@ -90,6 +90,10 @@ let
        GRKERNSEC y
        ${grsecMainConfig}

+        # The paxmarks mechanism relies on ELF header markings, but the default
+        # grsecurity configuration only enables xattr markings
+        PAX_PT_PAX_FLAGS y
+
        ${if cfg.config.restrictProc then
            "GRKERNSEC_PROC_USER y"
          else