nixos/hardened: don't set vsyscall=none

Upstreamed in anthraxx/linux-hardened@d300b0fdad706daab3a36a8d23b35ebe03c3fc87.
wip/yesman
Emily 4 years ago
parent 3b32cd2a5b
commit cf1bce6a7a
  1. 3
      nixos/modules/profiles/hardened.nix

@ -40,9 +40,6 @@ with lib;
# Overwrite free'd memory
"page_poison=1"
# Disable legacy virtual syscalls
"vsyscall=none"
# Enable page allocator randomization
"page_alloc.shuffle=1"
];

Loading…
Cancel
Save