diff options
author | Rick van Schijndel <Mindavi@users.noreply.github.com> | 2024-06-19 19:54:30 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-06-19 19:54:30 +0200 |
commit | 43ce0f9ee0d351f11d1e12b010e1567577661b93 (patch) | |
tree | d8849d33b5cd87ceb565af4525ba160c547f842f /nixos | |
parent | ec5e4223661d67708161e847a7c5fd9de567a6f1 (diff) | |
parent | 6375a5878dbd1b9e6f601ecd655708eef0093203 (diff) |
Merge pull request #318256 from risicle/ris-stack-clash-protection
cc-wrapper: add stack clash protection hardening flag
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/doc/manual/release-notes/rl-2411.section.md | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2411.section.md b/nixos/doc/manual/release-notes/rl-2411.section.md index a9368566b60a9..4d40a6b0283c9 100644 --- a/nixos/doc/manual/release-notes/rl-2411.section.md +++ b/nixos/doc/manual/release-notes/rl-2411.section.md @@ -85,6 +85,8 @@ - The `zerocallusedregs` hardening flag is enabled by default on compilers that support it. +- The `stackclashprotection` hardening flag has been added, though disabled by default. + - `hareHook` has been added as the language framework for Hare. From now on, it, not the `hare` package, should be added to `nativeBuildInputs` when building Hare programs. |