b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/hardened: don't set vm.unprivileged_userfaultfd

Browse source 
Upstreamed in anthraxx/linux-hardened@a712392b88.
This commit is contained in:
Emily 2020-04-05 05:04:43 +01:00
parent cc28d51237
commit 84f258bf09
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nixos/modules/profiles/hardened.nix
View file

@ -108,7 +108,4 @@ with lib;
# Ignore outgoing ICMP redirects (this is ipv4 only)
boot.kernel.sysctl."net.ipv4.conf.all.send_redirects" = mkDefault false;
boot.kernel.sysctl."net.ipv4.conf.default.send_redirects" = mkDefault false;
# Restrict userfaultfd syscalls to processes with the SYS_PTRACE capability
boot.kernel.sysctl."vm.unprivileged_userfaultfd" = mkDefault false;
}