grsecurity: enable ability to lock in readonly mounts

2016-12-05 23:55:40 +01:00
parent 0e765c72e5
commit cc396697a6
1 changed files with 1 additions and 0 deletions
--- a/pkgs/os-specific/linux/kernel/grsecurity-nixos-config.nix
+++ b/pkgs/os-specific/linux/kernel/grsecurity-nixos-config.nix
@@ -30,6 +30,7 @@ PAX_KERNEXEC_PLUGIN_METHOD_BTS y
 # Additional grsec hardening not implied by auto constraints
 GRKERNSEC_IO y
 GRKERNSEC_SYSFS_RESTRICT y
+GRKERNSEC_ROFS y

 GRKERNSEC_MODHARDEN y