diff options
author | Austin Seipp <aseipp@pobox.com> | 2015-04-13 17:10:47 -0500 |
---|---|---|
committer | Austin Seipp <aseipp@pobox.com> | 2015-04-13 17:10:47 -0500 |
commit | b86f6a3ed6d4acf5e50411502efb9260c490bb0e (patch) | |
tree | cbc2067dee7d327e33f1c19284141b16deb7a623 /nixos | |
parent | 409da39c08d6d192ccc04f2069fa2e3447f54a35 (diff) | |
parent | 66c4f51046507024ec09a39a8b3f6683883c8ba9 (diff) | |
download | nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar.gz nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar.bz2 nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar.lz nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar.xz nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.tar.zst nixlib-b86f6a3ed6d4acf5e50411502efb9260c490bb0e.zip |
Merge pull request #7148 from joachifm/grsec-trivial
grsecurity module: trivial improvements
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/security/grsecurity.nix | 10 |
1 files changed, 2 insertions, 8 deletions
diff --git a/nixos/modules/security/grsecurity.nix b/nixos/modules/security/grsecurity.nix index 35974f6890e6..f305d8f523b5 100644 --- a/nixos/modules/security/grsecurity.nix +++ b/nixos/modules/security/grsecurity.nix @@ -112,9 +112,6 @@ in <literal>kernel.grsecurity.grsec_lock</literal> to non-zero as soon as all sysctl options are set. *THIS IS EXTREMELY IMPORTANT*! - - If disabled, this also turns off the - <literal>systemd-sysctl</literal> service. ''; }; @@ -229,11 +226,8 @@ in kernel 3.19) to continue. ''; } - { assertion = (cfg.stable -> !cfg.testing) || (cfg.testing -> !cfg.stable); - message = '' - You must select either the stable or testing patch, not - both. - ''; + { assertion = !(cfg.stable && cfg.testing); + message = "Select either one of the stable or testing patch"; } { assertion = (cfg.config.restrictProc -> !cfg.config.restrictProcWithGroup) || (cfg.config.restrictProcWithGroup -> !cfg.config.restrictProc); |