public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #82006 from emilazy/enable-linux-hardened-ia32-emulation

Browse Source 
linuxPackages_{,_latest,_testing}_hardened: enable 32-bit emulation
This commit is contained in:
Graham Christensen
2020-03-14 09:20:58 -04:00
committed by GitHub
parent 17a0f62bed b628400f5e
commit 244178e166
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/os-specific/linux/kernel/hardened-config.nix
+1 -2
View File
@@ -19,8 +19,7 @@ assert (versionAtLeast version "4.9");
optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
DEFAULT_MMAP_MIN_ADDR = freeform "65536"; # Prevent allocation of first 64K of memory
# Reduce attack surface by disabling various emulations
IA32_EMULATION = no;
# Reduce attack surface by disabling X32
X86_X32 = no;
# Note: this config depends on EXPERT y and so will not take effect, hence
# it is left "optional" for now.