nixpkgs/pkgs/by-name/ch/checksec/0001-attempt-to-modprobe-config-before-checking-kernel.patch
aleksana 571c71e6f7 treewide: migrate packages to pkgs/by-name, take 1
We are migrating packages that meet below requirements:

1. using `callPackage`
2. called path is a directory
3. overriding set is empty (`{ }`)
4. not containing path expressions other than relative path (to
makenixpkgs-vet happy)
5. not referenced by nix files outside of the directory, other
than`pkgs/top-level/all-packages.nix`
6. not referencing nix files outside of the directory
7. not referencing `default.nix` (since it's changed to `package.nix`)
8. `outPath` doesn't change after migration

The tool is here: https://github.com/Aleksanaa/by-name-migrate.
2024-11-09 20:04:51 +08:00

25 lines
812 B
Diff

From 5cfb08effd21d9278e3eb8901c85112a331c3181 Mon Sep 17 00:00:00 2001
From: Austin Seipp <aseipp@pobox.com>
Date: Tue, 26 Oct 2021 09:23:07 +0000
Subject: [PATCH] attempt to 'modprobe config' before checking kernel
---
checksec | 1 +
1 file changed, 1 insertion(+)
diff --git a/checksec b/checksec
index 5536250..895073b 100755
--- a/checksec
+++ b/checksec
@@ -1059,6 +1059,7 @@ kernelcheck() {
echo_message " options that harden the kernel itself against attack.\n\n" '' '' ''
echo_message " Kernel config:\n" '' '' '{ "kernel": '
+ modprobe configs 2> /dev/null
if [[ ! "${1}" == "" ]]; then
kconfig="cat ${1}"
echo_message " Warning: The config ${1} on disk may not represent running kernel config!\n\n" "${1}" "<kernel config=\"${1}\"" "{ \"KernelConfig\":\"${1}\""
--
2.33.0