Branch: refs/heads/master
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 42c58cd2e8a7f414efebeadc9d182d4aa11d282e
      
https://github.com/NixOS/nixpkgs/commit/42c58cd2e8a7f414efebeadc9d182d4aa11d282e
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-05-09 (Tue, 09 May 2017)

  Changed paths:
    M pkgs/os-specific/linux/kernel/hardened-config.nix

  Log Message:
  -----------
  linux_hardened: compile with stackprotector-strong

Default is regular, which we need to unset for kconfig to accept the new
value.


  Commit: a7ecdffc281f847e8addabee216a1b424998b130
      
https://github.com/NixOS/nixpkgs/commit/a7ecdffc281f847e8addabee216a1b424998b130
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-05-09 (Tue, 09 May 2017)

  Changed paths:
    M pkgs/os-specific/linux/kernel/hardened-config.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  linux_hardened: move to 4.11

Note that DEBUG_RODATA has been split into STRICT_KERNEL_RWX &
STRICT_MODULE_RWX, which are on by default (non-optional).


  Commit: 1816e2b96084f982a0536f40953383d42c082b8d
      
https://github.com/NixOS/nixpkgs/commit/1816e2b96084f982a0536f40953383d42c082b8d
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-05-09 (Tue, 09 May 2017)

  Changed paths:
    M pkgs/os-specific/linux/kernel/hardened-config.nix

  Log Message:
  -----------
  linux_hardened: BUG on struct validation failure


  Commit: 996b65cfbad921d51a716751329f940b1cc1a649
      
https://github.com/NixOS/nixpkgs/commit/996b65cfbad921d51a716751329f940b1cc1a649
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-05-09 (Tue, 09 May 2017)

  Changed paths:
    M pkgs/os-specific/linux/kernel/hardened-config.nix

  Log Message:
  -----------
  linux_hardened: enable structleak plugin

A port of the PaX structleak plugin.  Note that this version of structleak
seems to cover less ground than the PaX original (only marked structs are
zeroed). [1]

[1]: 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61f13eaa1ee17728c41370100d2d45c254ce76f


Compare: https://github.com/NixOS/nixpkgs/compare/e9b6c41ee850...996b65cfbad9
_______________________________________________
nix-commits mailing list
nix-comm...@lists.science.uu.nl
https://mailman.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to