[Nix-dev] grsecurity on Nix

[zimbatm]

Yeah the wiki is definitely outdated, it's been in read-only mode for a
while now.

If you like security check out also
https://github.com/NixOS/nixpkgs/pull/12895

Cheers,
z

On Mon, 1 Aug 2016 at 20:51 Matthew Robbetts <wingfeathera at gmail.com> wrote:

> Hi Nixers,
>
> I’m interested in setting up grsecurity/PaX protections on my nix machine.
> My googling led me quickly to:
> https://nixos.org/wiki/Hardened_NixOS
>
> which makes perfect sense. I’m coming from Gentoo anyway, and the Hardened
> project there is familiar to me. The instructions there (basically add
> kernel options) have also worked just fine (at least, they have affected
> the outcome from running paxtest).
>
> However, I then noticed the existence of
> nixos/modules/security/grsecurity.nix, which appears to me to automate
> some of this, but is not mentioned at all on the wiki. Is this module the
> preferred way to enable grsecurity, and the wiki just needs updating?
>
>
> Ta,
> Matt
> _______________________________________________
> nix-dev mailing list
> nix-dev at lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.science.uu.nl/pipermail/nix-dev/attachments/20160801/e1dc49bb/attachment-0001.html>