From ef903555fda39785832f11c2b0b8fb8f3f96dbfc Mon Sep 17 00:00:00 2001 From: Austin Seipp Date: Mon, 17 Mar 2014 18:29:28 -0500 Subject: [PATCH] gradm: learn of all accesses for /nix/store This is necessary for gradm's learning mode to work, as otherwise the /nix/store directory is marked hidden, which causes the kernel to reject the linker loading ld-linux.so Signed-off-by: Austin Seipp --- pkgs/os-specific/linux/gradm/default.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/os-specific/linux/gradm/default.nix b/pkgs/os-specific/linux/gradm/default.nix index 7f6f373b098..62a3cfa631e 100644 --- a/pkgs/os-specific/linux/gradm/default.nix +++ b/pkgs/os-specific/linux/gradm/default.nix @@ -24,6 +24,8 @@ stdenv.mkDerivation rec { KERNEL=="grsec", MODE="0622" LABEL="permissions_end" EOF + + echo "inherit-learn /nix/store" >> $out/etc/grsec/learn_config ''; makeFlags =