summary refs log tree commit diff
path: root/nixos/doc/manual
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-07-12 20:22:20 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-07-23 19:09:47 +0200
commitedbaba6d3cf84ca86a6fb939ec6099f20c691ed6 (patch)
tree9c7bb7a3f6d983842d4bb28b1b6d8c067237bcc0 /nixos/doc/manual
parent190890cdac51c6be80a1929747c2b6bd9f9ca6cc (diff)
downloadnixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar.gz
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar.bz2
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar.lz
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar.xz
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.tar.zst
nixlib-edbaba6d3cf84ca86a6fb939ec6099f20c691ed6.zip
nixos release notes: document changes to grsecurity/PaX
Diffstat (limited to 'nixos/doc/manual')
-rw-r--r--nixos/doc/manual/release-notes/rl-1609.xml11
1 files changed, 8 insertions, 3 deletions
diff --git a/nixos/doc/manual/release-notes/rl-1609.xml b/nixos/doc/manual/release-notes/rl-1609.xml
index be175a54c232..0bea6cbbf2dd 100644
--- a/nixos/doc/manual/release-notes/rl-1609.xml
+++ b/nixos/doc/manual/release-notes/rl-1609.xml
@@ -45,9 +45,14 @@ following incompatible changes:</para>
 <para>Other notable improvements:</para>
 
 <itemizedlist>
-  <listitem>
-    <para>todo</para>
-  </listitem>
+
+  <listitem><para>Revamped grsecurity/PaX support.  There is now only a single
+  general-purpose distribution kernel and the configuration interface has been
+  streamlined.  Desktop users should be able to simply set
+  <programlisting>security.grsecurity.enable = true</programlisting> to get
+  a reasonably secure system without having to sacrifice too much
+  functionality.  See <xref linkend="sec-grsecurity" /> for documentation
+  </para></listitem>
 
 </itemizedlist>