Enable CC_STACKPROTECTOR_REGULAR on linux 3.14+
This commit is contained in:
parent
0b1e408b6b
commit
0c66dbaee6
|
@ -167,8 +167,10 @@ with stdenv.lib;
|
||||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||||
DEVKMEM n # Disable /dev/kmem
|
DEVKMEM n # Disable /dev/kmem
|
||||||
${optionalString (versionOlder version "3.14") ''
|
${if versionOlder version "3.14" then ''
|
||||||
CC_STACKPROTECTOR y # Detect buffer overflows on the stack
|
CC_STACKPROTECTOR y # Detect buffer overflows on the stack
|
||||||
|
'' else ''
|
||||||
|
CC_STACKPROTECTOR_REGULAR y
|
||||||
''}
|
''}
|
||||||
${optionalString (versionAtLeast version "3.12") ''
|
${optionalString (versionAtLeast version "3.12") ''
|
||||||
USER_NS y # Support for user namespaces
|
USER_NS y # Support for user namespaces
|
||||||
|
|
Loading…
Reference in a new issue