mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-23 15:33:13 +00:00
kernel: Make SECURITY_YAMA optional
It's highly recommended, but not required to run NixOS.
This commit is contained in:
parent
a000ed181c
commit
f0602d2d36
@ -284,7 +284,7 @@ with stdenv.lib;
|
||||
RANDOMIZE_BASE? y
|
||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||
SECURITY_YAMA y # Prevent processes from ptracing non-children processes
|
||||
SECURITY_YAMA? y # Prevent processes from ptracing non-children processes
|
||||
DEVKMEM n # Disable /dev/kmem
|
||||
${if versionOlder version "3.14" then ''
|
||||
CC_STACKPROTECTOR? y # Detect buffer overflows on the stack
|
||||
|
Loading…
Reference in New Issue
Block a user