kernel/hardened-config.nix: re-enable GCC plugins
This commit is contained in:
parent
c789f642f0
commit
9dc0d94896
|
@ -103,17 +103,15 @@ PAGE_POISONING_ZERO y
|
||||||
PANIC_ON_OOPS y
|
PANIC_ON_OOPS y
|
||||||
PANIC_TIMEOUT -1
|
PANIC_TIMEOUT -1
|
||||||
|
|
||||||
${optionalString (versionOlder version "4.18") ''
|
GCC_PLUGINS y # Enable gcc plugin options
|
||||||
GCC_PLUGINS y # Enable gcc plugin options
|
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
|
||||||
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
|
GCC_PLUGIN_LATENT_ENTROPY y
|
||||||
GCC_PLUGIN_LATENT_ENTROPY y
|
|
||||||
|
|
||||||
${optionalString (versionAtLeast version "4.11") ''
|
${optionalString (versionAtLeast version "4.11") ''
|
||||||
GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin
|
GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin
|
||||||
''}
|
''}
|
||||||
${optionalString (versionAtLeast version "4.14") ''
|
${optionalString (versionAtLeast version "4.14") ''
|
||||||
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address
|
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address
|
||||||
''}
|
|
||||||
''}
|
''}
|
||||||
|
|
||||||
# Disable various dangerous settings
|
# Disable various dangerous settings
|
||||||
|
|
Loading…
Reference in a new issue