summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/tag-hardened.patch
diff options
context:
space:
mode:
authorTim Steinbach <tim@nequissimus.com>2017-08-05 15:38:17 -0400
committerTim Steinbach <tim@nequissimus.com>2017-08-06 09:58:02 -0400
commitff10bafd00520510f5c8a9dec4060321477c47d5 (patch)
tree1d05215602f5ff73a1ea31b090c541330b59cef9 /pkgs/os-specific/linux/kernel/tag-hardened.patch
parente66c85d1962faa99d323eb8980ddbec16dbd98a3 (diff)
downloadnixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.gz
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.bz2
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.lz
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.xz
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.tar.zst
nixpkgs-ff10bafd00520510f5c8a9dec4060321477c47d5.zip
linux: Expand hardened config
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
Diffstat (limited to 'pkgs/os-specific/linux/kernel/tag-hardened.patch')
-rw-r--r--pkgs/os-specific/linux/kernel/tag-hardened.patch7
1 files changed, 7 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/tag-hardened.patch b/pkgs/os-specific/linux/kernel/tag-hardened.patch
new file mode 100644
index 00000000000..ff8a3a12797
--- /dev/null
+++ b/pkgs/os-specific/linux/kernel/tag-hardened.patch
@@ -0,0 +1,7 @@
+diff --git a/localversion-hardened b/localversion-hardened
+new file mode 100644
+index 0000000000..e578045860
+--- /dev/null
++++ b/localversion-hardened
+@@ -0,0 +1 @@
++-hardened