forked from mirrors/nixpkgs
linux: add in kernel 5.4 lockdown feature
This commit is contained in:
parent
abc9b32fc6
commit
928fdab4a1
|
@ -363,6 +363,7 @@ let
|
|||
SECURITY_APPARMOR = yes;
|
||||
DEFAULT_SECURITY_APPARMOR = yes;
|
||||
|
||||
SECURITY_LOCKDOWN_LSM = whenAtLeast "5.4" yes;
|
||||
} // optionalAttrs (!stdenv.hostPlatform.isAarch32) {
|
||||
|
||||
# Detect buffer overflows on the stack
|
||||
|
|
Loading…
Reference in a new issue