diff options
| author | Tim Steinbach <tim@nequissimus.com> | 2017-10-11 13:50:20 -0400 |
|---|---|---|
| committer | Tim Steinbach <tim@nequissimus.com> | 2017-10-11 13:50:20 -0400 |
| commit | 5dda1324be421c1a2afd5a559a87f97691287003 (patch) | |
| tree | 410e03eb55f533f95ad7a9597bce4591363d2504 | |
| parent | 48f0389bf8bcf1cd7b71e6f90165553685afcfae (diff) | |
| download | nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar.gz nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar.bz2 nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar.lz nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar.xz nixlib-5dda1324be421c1a2afd5a559a87f97691287003.tar.zst nixlib-5dda1324be421c1a2afd5a559a87f97691287003.zip | |
linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT
| -rw-r--r-- | pkgs/os-specific/linux/kernel/hardened-config.nix | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/pkgs/os-specific/linux/kernel/hardened-config.nix b/pkgs/os-specific/linux/kernel/hardened-config.nix index 75c06390f755..3744c28e204f 100644 --- a/pkgs/os-specific/linux/kernel/hardened-config.nix +++ b/pkgs/os-specific/linux/kernel/hardened-config.nix @@ -97,11 +97,6 @@ ${optionalString (versionAtLeast version "4.11") '' GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin ''} -${optionalString (versionAtLeast version "4.13") '' - GCC_PLUGIN_RANDSTRUCT y # A port of the PaX randstruct plugin - GCC_PLUGIN_RANDSTRUCT_PERFORMANCE y -''} - # Disable various dangerous settings ACPI_CUSTOM_METHOD n # Allows writing directly to physical memory PROC_KCORE n # Exposes kernel text image layout |