mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-16 23:03:40 +01:00
Merge pull request #154253 from brandonweeks/kspp
This commit is contained in:
commit
325f561c68
1 changed files with 2 additions and 1 deletions
|
@ -456,7 +456,8 @@ let
|
|||
# Detect writes to read-only module pages
|
||||
DEBUG_SET_MODULE_RONX = { optional = true; tristate = whenOlder "4.11" "y"; };
|
||||
RANDOMIZE_BASE = option yes;
|
||||
STRICT_DEVMEM = option yes; # Filter access to /dev/mem
|
||||
STRICT_DEVMEM = yes; # Filter access to /dev/mem
|
||||
IO_STRICT_DEVMEM = whenAtLeast "4.5" yes;
|
||||
SECURITY_SELINUX_BOOTPARAM_VALUE = whenOlder "5.1" (freeform "0"); # Disable SELinux by default
|
||||
# Prevent processes from ptracing non-children processes
|
||||
SECURITY_YAMA = option yes;
|
||||
|
|
Loading…
Reference in a new issue