3
0
Fork 0
forked from mirrors/nixpkgs

kernel config: Fix grsecurity-specific config

Refs 13a38440c6
This commit is contained in:
Shea Levy 2015-05-18 14:32:29 -04:00
parent 023aaf8f6d
commit 8dbd385e1c

View file

@ -234,7 +234,7 @@ with stdenv.lib;
# Security related features. # Security related features.
STRICT_DEVMEM y # Filter access to /dev/mem STRICT_DEVMEM y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
${optionalString (!features.grsecurity or true) '' ${optionalString (!(features.grsecurity or false)) ''
DEVKMEM n # Disable /dev/kmem DEVKMEM n # Disable /dev/kmem
''} ''}
${if versionOlder version "3.14" then '' ${if versionOlder version "3.14" then ''
@ -380,7 +380,7 @@ with stdenv.lib;
# Virtualisation. # Virtualisation.
PARAVIRT? y PARAVIRT? y
${optionalString (!features.grsecurity or true) ${optionalString (!(features.grsecurity or false))
(if versionAtLeast version "3.10" then '' (if versionAtLeast version "3.10" then ''
HYPERVISOR_GUEST y HYPERVISOR_GUEST y
'' else '' '' else ''