mirror/nixpkgs - Nix packages collection

Age	Commit message (Collapse)	Author	Files	Lines
2017-05-18	linux_hardened: enable checks on scatter-gather tables	Joachim Fasting	1	-0/+1
	Recommended by kspp
2017-05-09	linux_hardened: enable structleak plugin	Joachim Fasting	1	-0/+4
	A port of the PaX structleak plugin. Note that this version of structleak seems to cover less ground than the PaX original (only marked structs are zeroed). [1] [1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61f13eaa1ee17728c41370100d2d45c254ce76f
2017-05-09	linux_hardened: BUG on struct validation failure	Joachim Fasting	1	-0/+4

2017-05-09	linux_hardened: move to 4.11	Joachim Fasting	1	-6/+3
	Note that DEBUG_RODATA has been split into STRICT_KERNEL_RWX & STRICT_MODULE_RWX, which are on by default (non-optional).
2017-05-09	linux_hardened: compile with stackprotector-strong	Joachim Fasting	1	-0/+3
	Default is regular, which we need to unset for kconfig to accept the new value.
2017-04-30	linux_hardened: init	Joachim Fasting	1	-0/+54
	The rationale for this is to have a place to enable hardening features that are either too invasive or that may be speculative/yet proven to be worthwhile for general-purpose kernels.