diff options
| author | Robert Scott <code@humanleg.org.uk> | 2024-02-24 20:23:31 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-24 20:23:31 +0000 |
| commit | 259fabc9eed14e3db5cb15a27d37ee758cefeb5a (patch) | |
| tree | 41f440e651ba36fb35a68643b7a8192e8b5b2777 /nixos | |
| parent | 35aa42e19a778e1da77aa44f418fa2e87cc5cc41 (diff) | |
| parent | 1cae11c0fc716d0a2ae83b6916e90fa538714308 (diff) | |
| download | nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar.gz nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar.bz2 nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar.lz nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar.xz nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.tar.zst nixlib-259fabc9eed14e3db5cb15a27d37ee758cefeb5a.zip | |
Merge pull request #282638 from risicle/ris-trivialautovarinit
cc-wrapper: add `trivialautovarinit` hardening flag support
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/doc/manual/release-notes/rl-2405.section.md | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2405.section.md b/nixos/doc/manual/release-notes/rl-2405.section.md index ac3d2b69a4a2..488caa44f6ba 100644 --- a/nixos/doc/manual/release-notes/rl-2405.section.md +++ b/nixos/doc/manual/release-notes/rl-2405.section.md @@ -310,6 +310,8 @@ The pre-existing [services.ankisyncd](#opt-services.ankisyncd.enable) has been m - A new hardening flag, `zerocallusedregs` was made available, corresponding to the gcc/clang option `-fzero-call-used-regs=used-gpr`. +- A new hardening flag, `trivialautovarinit` was made available, corresponding to the gcc/clang option `-ftrivial-auto-var-init=pattern`. + - New options were added to the dnsdist module to enable and configure a DNSCrypt endpoint (see `services.dnsdist.dnscrypt.enable`, etc.). The module can generate the DNSCrypt provider key pair, certificates and also performs their rotation automatically with no downtime. |