forked from mirrors/nixpkgs
linux: Disable /dev/kmem
See e.g. https://wiki.ubuntu.com/Security/Features#A.2BAC8-dev.2BAC8-kmem_disabled
This commit is contained in:
parent
e1a7be4294
commit
bc8186be1e
|
@ -163,7 +163,8 @@ with stdenv.lib;
|
|||
|
||||
# Security related features.
|
||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # disable SELinux by default
|
||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||
DEVKMEM n # Disable /dev/kmem
|
||||
|
||||
# Misc. options.
|
||||
8139TOO_8129 y
|
||||
|
|
Loading…
Reference in a new issue