about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorRick van Schijndel <Mindavi@users.noreply.github.com>2024-06-19 19:54:30 +0200
committerGitHub <noreply@github.com>2024-06-19 19:54:30 +0200
commit43ce0f9ee0d351f11d1e12b010e1567577661b93 (patch)
treed8849d33b5cd87ceb565af4525ba160c547f842f /nixos
parentec5e4223661d67708161e847a7c5fd9de567a6f1 (diff)
parent6375a5878dbd1b9e6f601ecd655708eef0093203 (diff)
Merge pull request #318256 from risicle/ris-stack-clash-protection
cc-wrapper: add stack clash protection hardening flag
Diffstat (limited to 'nixos')
-rw-r--r--nixos/doc/manual/release-notes/rl-2411.section.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2411.section.md b/nixos/doc/manual/release-notes/rl-2411.section.md
index a9368566b60a9..4d40a6b0283c9 100644
--- a/nixos/doc/manual/release-notes/rl-2411.section.md
+++ b/nixos/doc/manual/release-notes/rl-2411.section.md
@@ -85,6 +85,8 @@
 
 - The `zerocallusedregs` hardening flag is enabled by default on compilers that support it.
 
+- The `stackclashprotection` hardening flag has been added, though disabled by default.
+
 - `hareHook` has been added as the language framework for Hare. From now on, it,
   not the `hare` package, should be added to `nativeBuildInputs` when building
   Hare programs.