JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

linux_hardended: enable gcc latent entropy plugin

Browse Source
This commit is contained in:
Franz Pletz 2018-01-03 07:10:24 +01:00
parent f8fd0b7a5f
commit ccb0ba56ef
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -97,6 +97,9 @@ PANIC_TIMEOUT -1
GCC_PLUGINS y # Enable gcc plugin options
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
GCC_PLUGIN_LATENT_ENTROPY y
${optionalString (versionAtLeast version "4.11") ''
GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin
''}