Skip to content

Commit

Permalink
linux_*_hardened: don't set LEGACY_VSYSCALL_NONE
Browse files Browse the repository at this point in the history
  • Loading branch information
emilazy committed Apr 17, 2020
1 parent 130f681 commit db6b327
Showing 1 changed file with 1 addition and 8 deletions.
9 changes: 1 addition & 8 deletions pkgs/os-specific/linux/kernel/hardened-config.nix
Expand Up @@ -16,14 +16,7 @@ with (stdenv.lib.kernel.whenHelpers version);

assert (versionAtLeast version "4.9");

optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
# Disable legacy virtual syscalls by default (modern glibc use vDSO instead).
#
# Note that the vanilla default is to *emulate* the legacy vsyscall mechanism,
# which is supposed to be safer than the native variant (wrt. ret2libc), so
# disabling it mainly helps reduce surface.
LEGACY_VSYSCALL_NONE = yes;
} // {
{
# Report BUG() conditions and kill the offending process.
BUG = yes;

Expand Down

0 comments on commit db6b327

Please sign in to comment.