JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

linux_hardened: compile with stackprotector-strong

Browse Source 
Default is regular, which we need to unset for kconfig to accept the new
value.
This commit is contained in:
Joachim Fasting 2017-05-05 11:55:39 +02:00
parent e9b6c41ee8
commit 42c58cd2e8
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -32,6 +32,9 @@ PAGE_POISONING y
PAGE_POISONING_NO_SANITY y
PAGE_POISONING_ZERO y
CC_STACKPROTECTOR_REGULAR n
CC_STACKPROTECTOR_STRONG y
# Stricter /dev/mem
STRICT_DEVMEM y
IO_STRICT_DEVMEM y