grsecurity: add a xen guest kernel

This is for the benefit of users who want to quickly get up and running
on a Xen host, for which the stock NixOS kernel is likely unsuitable.
This commit is contained in:
Joachim Fasting 2016-06-14 00:09:55 +02:00
parent 544b42f8f5
commit 7bda8f0a8f
No known key found for this signature in database
GPG key ID: 4330820E1E04DCF4

View file

@ -10987,6 +10987,19 @@ in
let self = linuxPackagesFor linux_grsec_nixos self;
in recurseIntoAttrs self;
# An unsupported grsec xen guest kernel
linux_grsec_server_xen = linux_grsec_nixos.override {
extraConfig = ''
GRKERNSEC y
PAX y
GRKERNSEC_CONFIG_AUTO y
GRKERNSEC_CONFIG_PRIORITY_SECURITY y
GRKERNSEC_CONFIG_SERVER y
GRKERNSEC_CONFIG_VIRT_GUEST y
GRKERNSEC_CONFIG_VIRT_XEN y
'';
};
# grsecurity: legacy
grsecurity_base_linux_3_14 = throw "grsecurity stable is no longer supported";