nixpkgs/pkgs/build-support/grsecurity
Joachim Fasting d4d7bfe07b
grsecurity: add option to disable chroot caps restriction
The chroot caps restriction disallows chroot'ed processes from running
any command that requires `CAP_SYS_ADMIN`, breaking `nixos-rebuild`. See
e.g., https://github.com/NixOS/nixpkgs/issues/15293

This significantly weakens chroot protections, but to break
nixos-rebuild out of the box is too severe.
2016-05-10 16:17:08 +02:00
..
default.nix grsecurity: add option to disable chroot caps restriction 2016-05-10 16:17:08 +02:00
flavors.nix grsecurity: use kernel version instead of testing / stable 2016-02-28 04:10:59 +01:00