From f0602d2d3613eac1ad95d8ba47de225141b05ed0 Mon Sep 17 00:00:00 2001 From: Aneesh Agrawal Date: Sat, 8 Oct 2016 10:49:23 -0400 Subject: [PATCH] kernel: Make SECURITY_YAMA optional It's highly recommended, but not required to run NixOS. --- pkgs/os-specific/linux/kernel/common-config.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix index c41e999ef78..bdc243a149e 100644 --- a/pkgs/os-specific/linux/kernel/common-config.nix +++ b/pkgs/os-specific/linux/kernel/common-config.nix @@ -284,7 +284,7 @@ with stdenv.lib; RANDOMIZE_BASE? y STRICT_DEVMEM y # Filter access to /dev/mem SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default - SECURITY_YAMA y # Prevent processes from ptracing non-children processes + SECURITY_YAMA? y # Prevent processes from ptracing non-children processes DEVKMEM n # Disable /dev/kmem ${if versionOlder version "3.14" then '' CC_STACKPROTECTOR? y # Detect buffer overflows on the stack