diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2017-05-12 18:38:27 +0200 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2017-05-14 15:08:51 +0200 |
| commit | e6c65ecb12c58cfa043d9cfa6db31b9920603588 (patch) | |
| tree | 5e33322042ce3aa40c5a6739f04fa79ba4d81d75 /nixos/modules/config/sysctl.nix | |
| parent | f7580a1f0659a0d44e3f9925bbbab82741ae1e8a (diff) | |
tree-wide: remove uses of features.grsecurity
Diffstat (limited to 'nixos/modules/config/sysctl.nix')
| -rw-r--r-- | nixos/modules/config/sysctl.nix | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/nixos/modules/config/sysctl.nix b/nixos/modules/config/sysctl.nix index a3f7e8f722f04..2114fb2b9d49c 100644 --- a/nixos/modules/config/sysctl.nix +++ b/nixos/modules/config/sysctl.nix @@ -60,10 +60,7 @@ in # Hide kernel pointers (e.g. in /proc/modules) for unprivileged # users as these make it easier to exploit kernel vulnerabilities. - # - # Removed under grsecurity. - boot.kernel.sysctl."kernel.kptr_restrict" = - if (config.boot.kernelPackages.kernel.features.grsecurity or false) then null else 1; + boot.kernel.sysctl."kernel.kptr_restrict" = 1; # Disable YAMA by default to allow easy debugging. boot.kernel.sysctl."kernel.yama.ptrace_scope" = mkDefault 0; |