grsecurity module: correct internal note
This commit is contained in:
parent
5d11dac8bb
commit
d1572d06fe
@ -97,7 +97,7 @@ in
|
|||||||
|
|
||||||
# Configure system tunables
|
# Configure system tunables
|
||||||
boot.kernel.sysctl = {
|
boot.kernel.sysctl = {
|
||||||
# Removed under grsecurity
|
# Read-only under grsecurity
|
||||||
"kernel.kptr_restrict" = mkForce null;
|
"kernel.kptr_restrict" = mkForce null;
|
||||||
} // optionalAttrs config.nix.useSandbox {
|
} // optionalAttrs config.nix.useSandbox {
|
||||||
# chroot(2) restrictions that conflict with sandboxed Nix builds
|
# chroot(2) restrictions that conflict with sandboxed Nix builds
|
||||||
|
Loading…
x
Reference in New Issue
Block a user