linux_hardended: enable gcc latent entropy plugin

2018-01-03 07:10:24 +01:00
parent f8fd0b7a5f
commit ccb0ba56ef
1 changed files with 3 additions and 0 deletions
--- a/pkgs/os-specific/linux/kernel/hardened-config.nix
+++ b/pkgs/os-specific/linux/kernel/hardened-config.nix
@@ -97,6 +97,9 @@ PANIC_TIMEOUT -1

 GCC_PLUGINS y # Enable gcc plugin options

+# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
+GCC_PLUGIN_LATENT_ENTROPY y
+
 ${optionalString (versionAtLeast version "4.11") ''
  GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin
 ''}