kernel: Make SECURITY_YAMA optional

It's highly recommended, but not required to run NixOS.
This commit is contained in:
Aneesh Agrawal 2016-10-08 10:49:23 -04:00 committed by Franz Pletz
parent a000ed181c
commit f0602d2d36

View File

@ -284,7 +284,7 @@ with stdenv.lib;
RANDOMIZE_BASE? y RANDOMIZE_BASE? y
STRICT_DEVMEM y # Filter access to /dev/mem STRICT_DEVMEM y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
SECURITY_YAMA y # Prevent processes from ptracing non-children processes SECURITY_YAMA? y # Prevent processes from ptracing non-children processes
DEVKMEM n # Disable /dev/kmem DEVKMEM n # Disable /dev/kmem
${if versionOlder version "3.14" then '' ${if versionOlder version "3.14" then ''
CC_STACKPROTECTOR? y # Detect buffer overflows on the stack CC_STACKPROTECTOR? y # Detect buffer overflows on the stack