JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

linux_*_hardened: don't set LEGACY_VSYSCALL_NONE

Browse Source 
Upstreamed in anthraxx/linux-hardened@d300b0fdad.
This commit is contained in:
Emily 2020-04-04 22:58:45 +01:00
parent 130f6812be
commit db6b327508
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pkgs/os-specific/linux/kernel/hardened-config.nix
View File

@ -16,14 +16,7 @@ with (stdenv.lib.kernel.whenHelpers version);
assert (versionAtLeast version "4.9");
optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
# Disable legacy virtual syscalls by default (modern glibc use vDSO instead).
#
# Note that the vanilla default is to *emulate* the legacy vsyscall mechanism,
# which is supposed to be safer than the native variant (wrt. ret2libc), so
# disabling it mainly helps reduce surface.
LEGACY_VSYSCALL_NONE = yes;
} // {
{
# Report BUG() conditions and kill the offending process.
BUG = yes;