about summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/update.sh
diff options
context:
space:
mode:
authorEmily <vcs@emily.moe>2020-04-04 22:47:13 +0100
committerEmily <vcs@emily.moe>2020-04-17 16:13:39 +0100
commit0d4f35efd4f905b322cd232e9740ce18f04270a0 (patch)
tree3c1d57b6f570ec5a2e3f22b5cb996a0eeadd87e8 /pkgs/os-specific/linux/kernel/update.sh
parent3d01e802bd56c78965b784a3fbb4db0d424e2c64 (diff)
linux_*_hardened: use linux-hardened patch set
This is an updated version of the former upstream,
https://github.com/AndroidHardeningArchive/linux-hardened, and provides
a minimal set of additional hardening patches on top of upstream.

The patch already incorporates many of our hardened profile defaults,
and releases are timely (Linux 5.5.15 and 5.6.2 were released on
2020-04-02; linux-hardened patches for them came out on 2020-04-03 and
2020-04-04 respectively).
Diffstat (limited to 'pkgs/os-specific/linux/kernel/update.sh')
-rwxr-xr-xpkgs/os-specific/linux/kernel/update.sh3
1 files changed, 3 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/update.sh b/pkgs/os-specific/linux/kernel/update.sh
index c7fcc07ea0a8b..c483661b6f5d4 100755
--- a/pkgs/os-specific/linux/kernel/update.sh
+++ b/pkgs/os-specific/linux/kernel/update.sh
@@ -60,3 +60,6 @@ done
 
 # Update linux-libre
 COMMIT=1 $NIXPKGS/pkgs/os-specific/linux/kernel/update-libre.sh
+
+# Update linux-hardened
+COMMIT=1 $NIXPKGS/pkgs/os-specific/linux/kernel/update-hardened.py