mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-23 14:11:36 +00:00
Code Issues Wiki Activity

linux_*_hardened: don't set LEGACY_VSYSCALL_NONE

Browse source 
Upstreamed in anthraxx/linux-hardened@d300b0fdad.
This commit is contained in:
Emily 2020-04-04 22:58:45 +01:00
parent 130f6812be
commit db6b327508
1 changed files with 1 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
pkgs/os-specific/linux/kernel/hardened-config.nix
View file

@ -16,14 +16,7 @@ with (stdenv.lib.kernel.whenHelpers version);
assert (versionAtLeast version "4.9");
optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
# Disable legacy virtual syscalls by default (modern glibc use vDSO instead).
#
# Note that the vanilla default is to *emulate* the legacy vsyscall mechanism,
# which is supposed to be safer than the native variant (wrt. ret2libc), so
# disabling it mainly helps reduce surface.
LEGACY_VSYSCALL_NONE = yes;
} // {
{
# Report BUG() conditions and kill the offending process.
BUG = yes;