summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-10-02 19:16:07 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-10-02 19:25:58 +0200
commit98e2b90cf382e3323f7f5d7b9dcc808099e53685 (patch)
tree3f1b96abcc6f09a05ffd38b93e2110c242eef169 /nixos/modules
parent9a9237e0aa9a834604ec0ce5c2ef3483654a0314 (diff)
downloadnixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar.gz
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar.bz2
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar.lz
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar.xz
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.tar.zst
nixlib-98e2b90cf382e3323f7f5d7b9dcc808099e53685.zip
grsecurity doc: note that module autoload hardening is disabled
Diffstat (limited to 'nixos/modules')
-rw-r--r--nixos/modules/security/grsecurity.xml4
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/security/grsecurity.xml b/nixos/modules/security/grsecurity.xml
index d70891544496..37314bdba8a5 100644
--- a/nixos/modules/security/grsecurity.xml
+++ b/nixos/modules/security/grsecurity.xml
@@ -149,6 +149,10 @@
 
         <listitem><para>Trusted path execution: a desirable feature, but
         requires some more work to operate smoothly on NixOS.</para></listitem>
+
+        <listitem><para>Module hardening: would break user initiated module
+        loading. Might enable this at some point, depending on the potential
+        breakage.</para></listitem>
       </itemizedlist>
     </para></listitem>