linux: enable FORTIFY_SOURCE
commitfbad6464beb1bfa15c7af4b5c055a65952ce9c48
authorBrandon Weeks <me@brandonweeks.com>
dateMon 10 Jan 2022, 12:44 (5 years ago)
parent1278e9d
pkgs/os-specific/linux/kernel/common-config.nix+2
@@ -452,6 +452,8 @@ let
452452 };
453453
454454 security = {
455+ FORTIFY_SOURCE = whenAtLeast "4.13" yes;
456+
455457 # https://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html
456458 DEBUG_LIST = yes;
457459 # Detect writes to read-only module pages