nixpkgs/nixos
Joachim Fasting 63433537ce
nixos/hardened profile: disable legacy virtual syscalls
This eliminates a theoretical risk of ASLR bypass due to the fixed address
mapping used by the legacy vsyscall mechanism.  Modern glibc use vdso(7)
instead so there is no loss of functionality, but some programs may fail
to run in this configuration.  Programs that fail to run because vsyscall
has been disabled will be logged to dmesg.

For background on virtual syscalls see https://lwn.net/Articles/446528/

Closes https://github.com/NixOS/nixpkgs/pull/25289
2017-04-29 17:27:11 +02:00
..
doc/manual Fix imperative container code examples 2017-04-24 22:31:02 +02:00
lib make-disk-image: change to be less VM-centric 2017-04-24 02:30:00 +00:00
maintainers make-disk-image: change to be less VM-centric 2017-04-24 02:30:00 +00:00
modules nixos/hardened profile: disable legacy virtual syscalls 2017-04-29 17:27:11 +02:00
tests mysql test: test replication persists between slave stop / start cycle 2017-04-25 18:51:49 -04:00
COPYING
default.nix Remove nixFallback 2017-03-06 15:54:50 +01:00
README
release-combined.nix nixos: Add a VM test for the SLiM display manager 2017-04-23 19:25:27 +02:00
release-small.nix nixos/release-small.nix: cleanup to use default versions 2017-01-27 15:33:54 +01:00
release.nix grsecurity: discontinue support 2017-04-28 12:35:15 +02:00

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
http://nixos.org/nixos and in the manual in doc/manual.