summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-10-02 18:35:43 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-10-02 19:25:58 +0200
commit9a9237e0aa9a834604ec0ce5c2ef3483654a0314 (patch)
tree12d2dfe494df8857aaa3d488a433c3b8dad52911 /nixos/modules
parent1bb7b44cd7970780170f1c4bb4bba8d91f5e06d7 (diff)
downloadnixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar.gz
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar.bz2
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar.lz
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar.xz
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.tar.zst
nixlib-9a9237e0aa9a834604ec0ce5c2ef3483654a0314.zip
grsecurity: revamp nixos kernel config
Cleanup:
- Restructure & add some commentary
- Remove redundant option specs given the auto config
  constraints (some are left in for documentation purposes)

Changes:
- GRKERNSEC_CONFIG_VIRT_HOST -> GUEST
  The former deselects paravirtualization and friends
- PAX_LATENT_ENTROPY n -> y (implied by auto)
- GRKERNSEC_ACL_HIDEKERN y -> n
  Possibly useless with redistribution
Diffstat (limited to 'nixos/modules')
0 files changed, 0 insertions, 0 deletions