public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hardened-config: ensure STRICT_KERNEL_RWX

Browse Source 
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
This commit is contained in:
Joachim Fasting 2019-01-05 13:43:42 +01:00
parent 1801aad7b8
commit dfd77a046d
No known key found for this signature in database
GPG Key ID: 5C204DF675C90294
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -66,6 +66,9 @@ ${optionalString (versionAtLeast version "4.12") ''
''} ''}
DEBUG_WX y # boot-time warning on RWX mappings DEBUG_WX y # boot-time warning on RWX mappings
${optionalString (versionAtLeast version "4.11") ''
STRICT_KERNEL_RWX y
''}
# Stricter /dev/mem # Stricter /dev/mem
STRICT_DEVMEM? y STRICT_DEVMEM? y