linux-hardened: enable page alloc randomization

New in 5.2
2019-07-18 14:00:06 +02:00 · 2019-07-18 14:00:06 +02:00 · 44d541078f
commit 44d541078f
parent 8bf23fbe44
1 changed files with 3 additions and 0 deletions
--- a/pkgs/os-specific/linux/kernel/hardened-config.nix
+++ b/pkgs/os-specific/linux/kernel/hardened-config.nix
@ -83,6 +83,9 @@ optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {

  SLAB_FREELIST_HARDENED = whenAtLeast "4.14" yes;

+  # Randomize page allocator when page_alloc.shuffle=1
+  SHUFFLE_PAGE_ALLOCATOR = whenAtLeast "5.2" yes;
+
  # Allow enabling slub/slab free poisoning with slub_debug=P
  SLUB_DEBUG = yes;