mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-09-17 12:50:04 +00:00
linux: enable BUG_ON_DATA_CORRUPTION
Enabled in [Debian][1], [Fedora][2]; not in Arch. Recommended by [Kernel Self Protection Project][3]. [2]:5f6aa5cb48/debian/config/config (L7719)[3]:e8025dc0fb/f/kernel-x86_64-fedora.config (_789)[4]: https://kernsec.org/wiki/index.php?title=Kernel_Self_Protection_Project/Recommended_Settings&oldid=4078
This commit is contained in:
@@ -669,6 +669,7 @@ let
|
||||
security = {
|
||||
# Report BUG() conditions and kill the offending process.
|
||||
BUG = yes;
|
||||
BUG_ON_DATA_CORRUPTION = yes;
|
||||
|
||||
FORTIFY_SOURCE = option yes;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user