mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-27 17:33:09 +00:00
kernel: Make SECURITY_YAMA optional
It's highly recommended, but not required to run NixOS.
This commit is contained in:
parent
a000ed181c
commit
f0602d2d36
@ -284,7 +284,7 @@ with stdenv.lib;
|
|||||||
RANDOMIZE_BASE? y
|
RANDOMIZE_BASE? y
|
||||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||||
SECURITY_YAMA y # Prevent processes from ptracing non-children processes
|
SECURITY_YAMA? y # Prevent processes from ptracing non-children processes
|
||||||
DEVKMEM n # Disable /dev/kmem
|
DEVKMEM n # Disable /dev/kmem
|
||||||
${if versionOlder version "3.14" then ''
|
${if versionOlder version "3.14" then ''
|
||||||
CC_STACKPROTECTOR? y # Detect buffer overflows on the stack
|
CC_STACKPROTECTOR? y # Detect buffer overflows on the stack
|
||||||
|
Loading…
Reference in New Issue
Block a user