From 96542a1b003aa52f58eb2aa5fd099d0141b83a4d Mon Sep 17 00:00:00 2001
From: Joachim Fasting <joachifm@fastmail.fm>
Date: Sun, 17 Jul 2016 21:30:16 +0200
Subject: [PATCH] grsecurity module: assert RBAC support in kernel

---
 nixos/modules/security/grsecurity.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/security/grsecurity.nix b/nixos/modules/security/grsecurity.nix
index b2b182595d85..4b9a11cf6dc8 100644
--- a/nixos/modules/security/grsecurity.nix
+++ b/nixos/modules/security/grsecurity.nix
@@ -50,6 +50,7 @@ in
         (isEnabled "PAX")
         (isYES "GRKERNSEC_SYSCTL")
         (isYES "GRKERNSEC_SYSCTL_DISTRO")
+        (isNO "GRKERNSEC_NO_RBAC")
       ];
 
     # Install PaX related utillities into the system profile.