From f9c3076e58595043d528a42e92dad49cd4e2e1d2 Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Mon, 15 Aug 2016 20:36:13 +0200 Subject: [PATCH] grsecurity docs: mention chromium setuid sandbox --- nixos/doc/manual/configuration/grsecurity.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nixos/doc/manual/configuration/grsecurity.xml b/nixos/doc/manual/configuration/grsecurity.xml index 8387658f1e5..28415e89bfa 100644 --- a/nixos/doc/manual/configuration/grsecurity.xml +++ b/nixos/doc/manual/configuration/grsecurity.xml @@ -267,8 +267,8 @@ User namespaces require CAP_SYS_ADMIN: consequently, unprivileged namespaces are unsupported. Applications that - rely on namespaces for sandboxing (e.g., chromium) must use a privileged - helper. + rely on namespaces for sandboxing must use a privileged helper. For chromium + there is . Access to EFI runtime services is disabled by default: this plugs a potential code injection attack vector; use