public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux-hardened: Enable KFENCE

Browse Source 
"Kernel Electric-Fence (KFENCE) is a low-overhead sampling-based memory safety
error detector. KFENCE detects heap out-of-bounds access, use-after-free, and
invalid-free errors."
This commit is contained in:
Tim Steinbach 2021-03-24 10:07:06 -04:00 committed by Tim Steinbach
parent a7d6642cf3
commit bd2bb9e381
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/os-specific/linux/kernel/hardened/config.nix
View File

@ -91,4 +91,6 @@ assert (versionAtLeast version "4.9");
CC_STACKPROTECTOR_REGULAR = whenOlder "4.18" no;
CC_STACKPROTECTOR_STRONG = whenOlder "4.18" yes;
# Detect out-of-bound reads/writes and use-after-free
KFENCE = whenAtLeast "5.12" yes;
}