nixos release notes: document changes to grsecurity/PaX

This commit is contained in:
Joachim Fasting 2016-07-12 20:22:20 +02:00
parent 190890cdac
commit edbaba6d3c
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08

View File

@ -45,9 +45,14 @@ following incompatible changes:</para>
<para>Other notable improvements:</para>
<itemizedlist>
<listitem>
<para>todo</para>
</listitem>
<listitem><para>Revamped grsecurity/PaX support. There is now only a single
general-purpose distribution kernel and the configuration interface has been
streamlined. Desktop users should be able to simply set
<programlisting>security.grsecurity.enable = true</programlisting> to get
a reasonably secure system without having to sacrifice too much
functionality. See <xref linkend="sec-grsecurity" /> for documentation
</para></listitem>
</itemizedlist>