tree-wide: remove uses of features.grsecurity

wip/yesman
Joachim Fasting 7 years ago
parent f7580a1f06
commit e6c65ecb12
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
  1. 5
      nixos/modules/config/sysctl.nix
  2. 3
      pkgs/development/libraries/accelio/default.nix
  3. 1
      pkgs/os-specific/linux/batman-adv/default.nix
  4. 2
      pkgs/os-specific/linux/kernel-headers/default.nix
  5. 1
      pkgs/os-specific/linux/lttng-modules/default.nix
  6. 3
      pkgs/os-specific/linux/rtl8723bs/default.nix
  7. 1
      pkgs/os-specific/linux/rtl8812au/default.nix
  8. 3
      pkgs/servers/openafs-client/default.nix

@ -60,10 +60,7 @@ in
# Hide kernel pointers (e.g. in /proc/modules) for unprivileged
# users as these make it easier to exploit kernel vulnerabilities.
#
# Removed under grsecurity.
boot.kernel.sysctl."kernel.kptr_restrict" =
if (config.boot.kernelPackages.kernel.features.grsecurity or false) then null else 1;
boot.kernel.sysctl."kernel.kptr_restrict" = 1;
# Disable YAMA by default to allow easy debugging.
boot.kernel.sysctl."kernel.yama.ptrace_scope" = mkDefault 0;

@ -59,7 +59,6 @@ stdenv.mkDerivation rec {
maintainers = with maintainers; [ wkennington ];
# kernel 4.2 is the most recent supported kernel
broken = kernel != null &&
(builtins.compareVersions kernel.version "4.2" == 1 ||
(kernel.features.grsecurity or false));
(builtins.compareVersions kernel.version "4.2" == 1);
};
}

@ -26,6 +26,5 @@ stdenv.mkDerivation rec {
license = stdenv.lib.licenses.gpl2;
maintainers = with stdenv.lib.maintainers; [ viric fpletz ];
platforms = with stdenv.lib.platforms; linux;
broken = (kernel.features.grsecurity or false);
};
}

@ -1,7 +1,5 @@
{ stdenv, kernel, perl }:
assert (!(kernel.features.grsecurity or false));
let
baseBuildFlags = [ "INSTALL_HDR_PATH=$(out)" "headers_install" ];
in stdenv.mkDerivation {

@ -31,7 +31,6 @@ stdenv.mkDerivation rec {
maintainers = [ maintainers.bjornfor ];
broken =
(builtins.compareVersions kernel.version "3.18" == -1) ||
(kernel.features.grsecurity or false) ||
(kernel.features.chromiumos or false);
};

@ -35,8 +35,7 @@ stdenv.mkDerivation rec {
homepage = "https://github.com/hadess/rtl8723bs";
license = stdenv.lib.licenses.gpl2;
platforms = stdenv.lib.platforms.linux;
broken = (! versionAtLeast kernel.version "3.19")
|| (kernel.features.grsecurity or false);
broken = (! versionAtLeast kernel.version "3.19");
maintainers = with maintainers; [ elitak ];
};
}

@ -31,6 +31,5 @@ stdenv.mkDerivation rec {
homepage = "https://github.com/Grawp/rtl8812au_rtl8821au";
license = stdenv.lib.licenses.gpl2;
platforms = [ "x86_64-linux" "i686-linux" ];
broken = (kernel.features.grsecurity or false);
};
}

@ -48,7 +48,6 @@ stdenv.mkDerivation rec {
maintainers = [ maintainers.z77z ];
broken =
(builtins.compareVersions kernel.version "3.18" == -1) ||
(builtins.compareVersions kernel.version "4.4" != -1) ||
(kernel.features.grsecurity or false);
(builtins.compareVersions kernel.version "4.4" != -1);
};
}

Loading…
Cancel
Save