kernel/hardened-config.nix: re-enable GCC plugins

This commit is contained in:
Pierre Bourdon 2019-01-04 02:07:53 +01:00
parent c789f642f0
commit 9dc0d94896
No known key found for this signature in database
GPG key ID: 6FB80DCD84DA0F1C

View file

@ -103,7 +103,6 @@ PAGE_POISONING_ZERO y
PANIC_ON_OOPS y
PANIC_TIMEOUT -1
${optionalString (versionOlder version "4.18") ''
GCC_PLUGINS y # Enable gcc plugin options
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
GCC_PLUGIN_LATENT_ENTROPY y
@ -114,7 +113,6 @@ ${optionalString (versionOlder version "4.18") ''
${optionalString (versionAtLeast version "4.14") ''
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address
''}
''}
# Disable various dangerous settings
ACPI_CUSTOM_METHOD n # Allows writing directly to physical memory