Tim Steinbach
bd2bb9e381
linux-hardened: Enable KFENCE
...
"Kernel Electric-Fence (KFENCE) is a low-overhead sampling-based memory safety
error detector. KFENCE detects heap out-of-bounds access, use-after-free, and
invalid-free errors."
2021-03-26 18:48:37 -04:00
Tim Steinbach
09406084bd
linux-hardened: Fix page poisoning for 5.11
...
`PAGE_POISONING_NO_SANITY` was removed in
https://git.kernel.org/linus/8f424750baaafcef229791882e879da01c9473b5
`PAGE_POISONING_ZERO` was removed in
https://git.kernel.org/linus/f289041ed4cf9a3f6e8a32068fef9ffb2acc5662
2021-03-24 09:19:44 -04:00
Ricardo M. Correia
d81067f3f3
linux: fix fallout from conflicting kernel configs
...
The parent commit forbids conflicting kernel config options.
Fix the hardened kernels by allowing options in common-config.nix to
be overridden by conflicting ones in hardened/config.nix.
I'm explicitly avoiding using a higher priority (e.g. using mkForce)
in hardened/config.nix so that the user can easily override the
options in that file.
2021-03-07 20:55:55 +01:00
Pavol Rusnak
a6ce00c50c
treewide: remove stdenv where not needed
2021-01-25 18:31:47 +01:00
Ben Siraphob
16d91ee628
pkgs/os-specific: stdenv.lib -> lib
2021-01-17 23:26:08 +07:00
Ricardo M. Correia
841705284c
linux: fix kernel config options for linux_*hardened
...
Fix config options for linux_hardened and linux_latest_hardened due
to #84302 .
This is a continuation of #88946 .
2020-06-10 16:16:02 +02:00
Emily
d6fe0a4e2d
linux/hardened: move files into directory
2020-05-08 15:49:35 +01:00
