From 7bda8f0a8fc38e3cccd565521342ec9aaeffb297 Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Tue, 14 Jun 2016 00:09:55 +0200 Subject: [PATCH] grsecurity: add a xen guest kernel This is for the benefit of users who want to quickly get up and running on a Xen host, for which the stock NixOS kernel is likely unsuitable. --- pkgs/top-level/all-packages.nix | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index 093fcc5fb89..75e577b16ab 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -10987,6 +10987,19 @@ in let self = linuxPackagesFor linux_grsec_nixos self; in recurseIntoAttrs self; + # An unsupported grsec xen guest kernel + linux_grsec_server_xen = linux_grsec_nixos.override { + extraConfig = '' + GRKERNSEC y + PAX y + GRKERNSEC_CONFIG_AUTO y + GRKERNSEC_CONFIG_PRIORITY_SECURITY y + GRKERNSEC_CONFIG_SERVER y + GRKERNSEC_CONFIG_VIRT_GUEST y + GRKERNSEC_CONFIG_VIRT_XEN y + ''; + }; + # grsecurity: legacy grsecurity_base_linux_3_14 = throw "grsecurity stable is no longer supported";