diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2016-07-14 17:44:05 +0200 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2016-07-16 11:11:35 +0200 |
| commit | 59c9a88a6b690a5e577c71b95494e99cfe6fa816 (patch) | |
| tree | 62dbc52906f5192ff5584649af2813e70278a064 /nixos | |
| parent | cef7150bc761d8ccd012f5cc6fb20e439293f3f0 (diff) | |
| download | nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar.gz nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar.bz2 nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar.lz nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar.xz nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.tar.zst nixlib-59c9a88a6b690a5e577c71b95494e99cfe6fa816.zip | |
grsecurity module: tweak lockTunables option description
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/security/grsecurity.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/nixos/modules/security/grsecurity.nix b/nixos/modules/security/grsecurity.nix index 348f3cb5e95a..e825679c343c 100644 --- a/nixos/modules/security/grsecurity.nix +++ b/nixos/modules/security/grsecurity.nix @@ -31,9 +31,9 @@ in description = '' Whether to automatically lock grsecurity tunables (<option>boot.kernel.sysctl."kernel.grsecurity.*"</option>). Disable - this to allow configuration of grsecurity features while the system is - running. The lock can be manually engaged by activating the - <literal>grsec-lock</literal> service unit. + this to allow runtime configuration of grsecurity features. Activate + the <literal>grsec-lock</literal> service unit to prevent further + configuration until the next reboot. ''; }; |