public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linuxPackages: hardened-config: check kernelArch, not system

Browse Source
This commit is contained in:
Jan Malakhovski 2017-09-15 21:07:42 +00:00 committed by Joachim Fasting
parent 616a7fe237
commit c345761c13
No known key found for this signature in database
GPG Key ID: 66EAB6B14F6B6E0D
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -22,7 +22,7 @@ ${optionalString (versionAtLeast version "4.10") ''
BUG_ON_DATA_CORRUPTION y BUG_ON_DATA_CORRUPTION y
''} ''}
${optionalString (stdenv.system == "x86_64-linux") '' ${optionalString (stdenv.platform.kernelArch == "x86_64") ''
DEFAULT_MMAP_MIN_ADDR 65536 # Prevent allocation of first 64K of memory DEFAULT_MMAP_MIN_ADDR 65536 # Prevent allocation of first 64K of memory
# Reduce attack surface by disabling various emulations # Reduce attack surface by disabling various emulations