public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux-copperhead: 4.14.12.a -> 4.14.13.a

Browse Source
This commit is contained in:
Tim Steinbach 2018-01-11 08:30:19 -05:00
parent b5b6656c87
commit eb0ecd7eba
No known key found for this signature in database
GPG Key ID: 472BFCCA96BD0EDA
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/os-specific/linux/kernel/common-config.nix
View File

@ -343,7 +343,7 @@ with stdenv.lib;
# Security related features. # Security related features.
RANDOMIZE_BASE? y RANDOMIZE_BASE? y
STRICT_DEVMEM y # Filter access to /dev/mem STRICT_DEVMEM? y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
SECURITY_YAMA? y # Prevent processes from ptracing non-children processes SECURITY_YAMA? y # Prevent processes from ptracing non-children processes
DEVKMEM n # Disable /dev/kmem DEVKMEM n # Disable /dev/kmem

4
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -61,8 +61,8 @@ ${optionalString (versionAtLeast version "4.12") ''
DEBUG_WX y # boot-time warning on RWX mappings DEBUG_WX y # boot-time warning on RWX mappings
# Stricter /dev/mem # Stricter /dev/mem
STRICT_DEVMEM y STRICT_DEVMEM? y
IO_STRICT_DEVMEM y IO_STRICT_DEVMEM? y
# Perform additional validation of commonly targeted structures. # Perform additional validation of commonly targeted structures.
DEBUG_CREDENTIALS y DEBUG_CREDENTIALS y

4
pkgs/os-specific/linux/kernel/linux-hardened-copperhead.nix
View File

@ -3,9 +3,9 @@
with stdenv.lib; with stdenv.lib;
let let
version = "4.14.12"; version = "4.14.13";
revision = "a"; revision = "a";
sha256 = "002a3c177fix472wqc89zrpfzwk60l7dn76l869ivgnd60n6wqb2"; sha256 = "08fvb1lllb0xkckw2y66g0j5z88kp877r51jj3kksfkvjfibjr0j";
# modVersion needs to be x.y.z, will automatically add .0 if needed # modVersion needs to be x.y.z, will automatically add .0 if needed
modVersion = concatStrings (intersperse "." (take 3 (splitString "." "${version}.0"))); modVersion = concatStrings (intersperse "." (take 3 (splitString "." "${version}.0")));