alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

kernel-config: Grsecurity fixes

Browse source
This commit is contained in:
William A. Kennington III 2015-05-15 17:38:09 -07:00
parent bca69399a8
commit 13a38440c6
1 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
pkgs/os-specific/linux/kernel/common-config.nix
View file

@ -234,7 +234,9 @@ with stdenv.lib;
# Security related features.
STRICT_DEVMEM y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
DEVKMEM? n # Disable /dev/kmem
${optionalString (!features.grsecurity or true) ''
DEVKMEM n # Disable /dev/kmem
''}
${if versionOlder version "3.14" then ''
CC_STACKPROTECTOR? y # Detect buffer overflows on the stack
'' else ''
@ -378,11 +380,13 @@ with stdenv.lib;
# Virtualisation.
PARAVIRT? y
${if versionAtLeast version "3.10" then ''
HYPERVISOR_GUEST? y
'' else ''
PARAVIRT_GUEST? y
''}
${optionalString (!features.grsecurity or true)
(if versionAtLeast version "3.10" then ''
HYPERVISOR_GUEST y
'' else ''
PARAVIRT_GUEST? y
'')
}
KVM_APIC_ARCHITECTURE y
KVM_ASYNC_PF y
${optionalString (versionOlder version "3.7") ''