From 98e2b90cf382e3323f7f5d7b9dcc808099e53685 Mon Sep 17 00:00:00 2001
From: Joachim Fasting <joachifm@fastmail.fm>
Date: Sun, 2 Oct 2016 19:16:07 +0200
Subject: grsecurity doc: note that module autoload hardening is disabled

---
 nixos/modules/security/grsecurity.xml | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'nixos/modules')

diff --git a/nixos/modules/security/grsecurity.xml b/nixos/modules/security/grsecurity.xml
index d70891544496..37314bdba8a5 100644
--- a/nixos/modules/security/grsecurity.xml
+++ b/nixos/modules/security/grsecurity.xml
@@ -149,6 +149,10 @@
 
         <listitem><para>Trusted path execution: a desirable feature, but
         requires some more work to operate smoothly on NixOS.</para></listitem>
+
+        <listitem><para>Module hardening: would break user initiated module
+        loading. Might enable this at some point, depending on the potential
+        breakage.</para></listitem>
       </itemizedlist>
     </para></listitem>
 
-- 
cgit 1.4.1