kernel/hardened-config.nix: re-enable GCC plugins

This commit is contained in:
Pierre Bourdon 2019-01-04 02:07:53 +01:00
parent c789f642f0
commit 9dc0d94896
No known key found for this signature in database
GPG key ID: 6FB80DCD84DA0F1C

View file

@ -103,17 +103,15 @@ PAGE_POISONING_ZERO y
PANIC_ON_OOPS y PANIC_ON_OOPS y
PANIC_TIMEOUT -1 PANIC_TIMEOUT -1
${optionalString (versionOlder version "4.18") '' GCC_PLUGINS y # Enable gcc plugin options
GCC_PLUGINS y # Enable gcc plugin options # Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources. GCC_PLUGIN_LATENT_ENTROPY y
GCC_PLUGIN_LATENT_ENTROPY y
${optionalString (versionAtLeast version "4.11") '' ${optionalString (versionAtLeast version "4.11") ''
GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin GCC_PLUGIN_STRUCTLEAK y # A port of the PaX structleak plugin
''} ''}
${optionalString (versionAtLeast version "4.14") '' ${optionalString (versionAtLeast version "4.14") ''
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address
''}
''} ''}
# Disable various dangerous settings # Disable various dangerous settings