about summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/hardened
diff options
context:
space:
mode:
authorFabián Heredia Montiel <fabianhjr@protonmail.com>2023-12-20 20:02:57 -0600
committerFabián Heredia Montiel <fabianhjr@protonmail.com>2023-12-20 21:46:13 -0600
commitf3568456727d90cd0f612899f027175105c53327 (patch)
tree1d8f49f5b2f648d82f3ba279c241e4cfd4ca2f22 /pkgs/os-specific/linux/kernel/hardened
parent5de6afea8179afa8de16c33b7e6b7bbe2569d047 (diff)
linux/hardened: condition DEBUG_CREDENTIALS to whenOlder than 6.6
Removed on 6.6.8

commit 207f135d819344c03333246f784f6666e652e081
Author: Jens Axboe <axboe@kernel.dk>
Date:   Fri Dec 15 13:40:57 2023 -0700

    cred: get rid of CONFIG_DEBUG_CREDENTIALS

    commit ae1914174a63a558113e80d24ccac2773f9f7b2b upstream.

    This code is rarely (never?) enabled by distros, and it hasn't caught
    anything in decades. Let's kill off this legacy debug code.

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8
Diffstat (limited to 'pkgs/os-specific/linux/kernel/hardened')
-rw-r--r--pkgs/os-specific/linux/kernel/hardened/config.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/os-specific/linux/kernel/hardened/config.nix b/pkgs/os-specific/linux/kernel/hardened/config.nix
index 92192eb79f898..7aa9c51173526 100644
--- a/pkgs/os-specific/linux/kernel/hardened/config.nix
+++ b/pkgs/os-specific/linux/kernel/hardened/config.nix
@@ -34,7 +34,7 @@ assert (versionAtLeast version "4.9");
   STRICT_KERNEL_RWX = yes;
 
   # Perform additional validation of commonly targeted structures.
-  DEBUG_CREDENTIALS     = yes;
+  DEBUG_CREDENTIALS     = whenOlder "6.6" yes;
   DEBUG_NOTIFIERS       = yes;
   DEBUG_PI_LIST         = whenOlder "5.2" yes; # doesn't BUG()
   DEBUG_PLIST           = whenAtLeast "5.2" yes;