grsec: refactor grsecurity packages

This now provides a handful of different grsecurity kernels for slightly
different 'flavors' of packages. This doesn't change the grsecurity
module to use them just yet, however.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
This commit is contained in:
Austin Seipp
2014-05-17 14:09:43 -05:00
parent cb894d4fc3
commit 4f27ad14a1
6 changed files with 252 additions and 128 deletions
@@ -167,7 +167,7 @@ with stdenv.lib;
# Security related features.
STRICT_DEVMEM y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
DEVKMEM n # Disable /dev/kmem
DEVKMEM? n # Disable /dev/kmem
${if versionOlder version "3.14" then ''
CC_STACKPROTECTOR y # Detect buffer overflows on the stack
'' else ''