summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/patches.nix
diff options
context:
space:
mode:
authorTim Steinbach <tim@nequissimus.com>2017-08-05 15:38:17 -0400
committerTim Steinbach <tim@nequissimus.com>2017-08-06 09:58:02 -0400
commitff10bafd00520510f5c8a9dec4060321477c47d5 (patch)
tree1d05215602f5ff73a1ea31b090c541330b59cef9 /pkgs/os-specific/linux/kernel/patches.nix
parente66c85d1962faa99d323eb8980ddbec16dbd98a3 (diff)
downloadnixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.gz
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.bz2
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.lz
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.xz
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.zst
nixlib-ff10bafd00520510f5c8a9dec4060321477c47d5.zip
linux: Expand hardened config
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
Diffstat (limited to 'pkgs/os-specific/linux/kernel/patches.nix')
-rw-r--r--pkgs/os-specific/linux/kernel/patches.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/patches.nix b/pkgs/os-specific/linux/kernel/patches.nix
index 1747d34fe112..4c78928a99aa 100644
--- a/pkgs/os-specific/linux/kernel/patches.nix
+++ b/pkgs/os-specific/linux/kernel/patches.nix
@@ -156,4 +156,9 @@ rec {
         sha256 = "10dmv3d3gj8rvj9h40js4jh8xbr5wyaqiy0kd819mya441mj8ll2";
       };
     };
+
+  tag_hardened = rec {
+    name = "tag-hardened";
+    patch = ./tag-hardened.patch;
+  };
 }