grsecurity doc: note that module autoload hardening is disabled

NixOS · Oct 2, 2016 · 98e2b90 · 98e2b90
1 parent 9a9237e
commit 98e2b90
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/nixos/modules/security/grsecurity.xml b/nixos/modules/security/grsecurity.xml
@@ -149,6 +149,10 @@
 
         <listitem><para>Trusted path execution: a desirable feature, but
         requires some more work to operate smoothly on NixOS.</para></listitem>
+
+        <listitem><para>Module hardening: would break user initiated module
+        loading. Might enable this at some point, depending on the potential
+        breakage.</para></listitem>
       </itemizedlist>
     </para></listitem>