grsecurity module: correct internal note

This commit is contained in:
Joachim Fasting 2016-08-01 15:56:09 +02:00
parent 5d11dac8bb
commit d1572d06fe
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08

View File

@ -97,7 +97,7 @@ in
# Configure system tunables
boot.kernel.sysctl = {
# Removed under grsecurity
# Read-only under grsecurity
"kernel.kptr_restrict" = mkForce null;
} // optionalAttrs config.nix.useSandbox {
# chroot(2) restrictions that conflict with sandboxed Nix builds