linux: Enable stack protector
This may prevent exploitation of buffer overflows.
This commit is contained in:
parent
c564d012f8
commit
f2f00c56e4
@ -165,6 +165,7 @@ with stdenv.lib;
|
|||||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||||
DEVKMEM n # Disable /dev/kmem
|
DEVKMEM n # Disable /dev/kmem
|
||||||
|
CC_STACKPROTECTOR y # Detect buffer overflows on the stack
|
||||||
|
|
||||||
# Misc. options.
|
# Misc. options.
|
||||||
8139TOO_8129 y
|
8139TOO_8129 y
|
||||||
|
Loading…
x
Reference in New Issue
Block a user