diff options
author | Tim Steinbach <tim@nequissimus.com> | 2017-08-05 15:38:17 -0400 |
---|---|---|
committer | Tim Steinbach <tim@nequissimus.com> | 2017-08-06 09:58:02 -0400 |
commit | ff10bafd00520510f5c8a9dec4060321477c47d5 (patch) | |
tree | 1d05215602f5ff73a1ea31b090c541330b59cef9 /pkgs/os-specific/linux/kernel/patches.nix | |
parent | e66c85d1962faa99d323eb8980ddbec16dbd98a3 (diff) | |
download | nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.gz nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.bz2 nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.lz nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.xz nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.zst nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.zip |
linux: Expand hardened config
Based on latest recommendations at http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
Diffstat (limited to 'pkgs/os-specific/linux/kernel/patches.nix')
-rw-r--r-- | pkgs/os-specific/linux/kernel/patches.nix | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/patches.nix b/pkgs/os-specific/linux/kernel/patches.nix index 1747d34fe112..4c78928a99aa 100644 --- a/pkgs/os-specific/linux/kernel/patches.nix +++ b/pkgs/os-specific/linux/kernel/patches.nix @@ -156,4 +156,9 @@ rec { sha256 = "10dmv3d3gj8rvj9h40js4jh8xbr5wyaqiy0kd819mya441mj8ll2"; }; }; + + tag_hardened = rec { + name = "tag-hardened"; + patch = ./tag-hardened.patch; + }; } |