Merge pull request #154370 from brandonweeks/kspp
linux: enable FORTIFY_SOURCE
commitf74a2e48402ac69dd0e28e5c9acd67ce1910c6d3
authorMaximilian Bosch <maximilian@mbosch.me>
dateSun 30 Jan 2022, 23:34 (5 years ago)
parent6afa07cfbad646
pkgs/os-specific/linux/kernel/common-config.nix+2
@@ -452,6 +452,8 @@ let
452452 };
453453
454454 security = {
455+ FORTIFY_SOURCE = whenAtLeast "4.13" yes;
456+
455457 # https://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html
456458 DEBUG_LIST = yes;
457459 # Detect writes to read-only module pages