summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/hardened-config.nix
Commit message (Expand)AuthorAge
* linux-hardened: enable page alloc randomizationJoachim Fasting2019-08-15
* hardened-config: enable the SafeSetID LSMJoachim Fasting2019-05-07
* linux: convert hardened-config to a structured oneMatthieu Coudron2019-01-28
* Revert "Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"""Pierre Bourdon2019-01-11
* Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT""Joachim Fasting2019-01-07
* hardened-config: allow slub/slab free poisoningJoachim Fasting2019-01-05
* hardened-config: explain HARDENED_USERCOPY_FALLBACK nJoachim Fasting2019-01-05
* hardened-config: ensure STRICT_KERNEL_RWXJoachim Fasting2019-01-05
* hardened-config: clarify MODIFY_LDT_SYSCALLJoachim Fasting2019-01-05
* hardened-config: clarify readonly LSM hooks configJoachim Fasting2019-01-05
* Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"Joachim Fasting2019-01-05
* kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+Pierre Bourdon2019-01-04
* kernel/hardened-config.nix: re-enable GCC pluginsPierre Bourdon2019-01-04
* treewide: Purge `stdenv.platform` and top-level `platform`John Ericson2018-08-20
* linux: Init 4.18Tim Steinbach2018-08-12
* linux-hardened: Adjust config for 4.17.4Tim Steinbach2018-07-03
* linux-hardened: Adjust for Linux 4.17Tim Steinbach2018-06-29
* linux_hardened: enforce usercopy whitelistingJoachim Fasting2018-04-29
* linux-copperhead: 4.14.12.a -> 4.14.13.aTim Steinbach2018-01-11
* linux_hardended: enable gcc latent entropy pluginFranz Pletz2018-01-04
* linux_hardened: structleak covers structs passed by addressJoachim Fasting2017-11-15
* linux_hardened: enable slab freelist hardeningJoachim Fasting2017-11-15
* linux-hardened: Disable GCC_PLUGIN_RANDSTRUCTTim Steinbach2017-10-11
* linuxPackages: hardened-config: enable DEBUG_PI_LISTJan Malakhovski2017-09-16
* linuxPackages: hardened-config: check kernelArch, not systemJan Malakhovski2017-09-16
* linuxPackages: hardened-config: disable `BUG_ON_DATA_CORRUPTION` for older ke...Jan Malakhovski2017-09-16
* hardened-config: build with fortify sourceJoachim Fasting2017-09-16
* hardened-config: enable the randstruct pluginJoachim Fasting2017-09-16
* hardened-config: additional refcount checkingJoachim Fasting2017-09-16
* hardened-config: enable read-only LSM hooksJoachim Fasting2017-08-11
* linux-hardened-config: various fixupsJoachim Fasting2017-08-06
* linux: Expand hardened configTim Steinbach2017-08-06
* linux_hardened: enable checks on scatter-gather tablesJoachim Fasting2017-05-18
* linux_hardened: enable structleak pluginJoachim Fasting2017-05-09
* linux_hardened: BUG on struct validation failureJoachim Fasting2017-05-09
* linux_hardened: move to 4.11Joachim Fasting2017-05-09
* linux_hardened: compile with stackprotector-strongJoachim Fasting2017-05-09
* linux_hardened: initJoachim Fasting2017-04-30