public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

grsecurity: enable PAX_INITIFY

Browse Source 
Uses gcc plugin to detect more instances where memory used during init
can be freed.
This commit is contained in:
Joachim Fasting 2016-12-09 12:08:21 +01:00
parent b412f7d4c3
commit ca7cc96ee8
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/os-specific/linux/kernel/grsecurity-nixos-config.nix
View File

@ -22,6 +22,10 @@ PAX_PT_PAX_FLAGS y
PAX_XATTR_PAX_FLAGS y PAX_XATTR_PAX_FLAGS y
PAX_EI_PAX n PAX_EI_PAX n
PAX_INITIFY y
# initify is a fairly recent feature, enable verbose mode to aid in debugging
PAX_INITIFY_VERBOSE y
# The bts instrumentation method is compatible with binary only modules. # The bts instrumentation method is compatible with binary only modules.
# #
# Note: if platform supports SMEP, we could do without this # Note: if platform supports SMEP, we could do without this