kernel/hardened-config.nix: re-enable GCC plugins
This commit is contained in:
parent
c789f642f0
commit
9dc0d94896
|
@ -103,7 +103,6 @@ PAGE_POISONING_ZERO y
|
|||
PANIC_ON_OOPS y
|
||||
PANIC_TIMEOUT -1
|
||||
|
||||
${optionalString (versionOlder version "4.18") ''
|
||||
GCC_PLUGINS y # Enable gcc plugin options
|
||||
# Gather additional entropy at boot time for systems that may not have appropriate entropy sources.
|
||||
GCC_PLUGIN_LATENT_ENTROPY y
|
||||
|
@ -114,7 +113,6 @@ ${optionalString (versionOlder version "4.18") ''
|
|||
${optionalString (versionAtLeast version "4.14") ''
|
||||
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y # Also cover structs passed by address
|
||||
''}
|
||||
''}
|
||||
|
||||
# Disable various dangerous settings
|
||||
ACPI_CUSTOM_METHOD n # Allows writing directly to physical memory
|
||||
|
|
Loading…
Reference in a new issue