This commit is contained in:
Cyryl Płotnicki 2021-05-21 19:39:21 +01:00
parent 5e5529c314
commit 9966474b58
3 changed files with 40 additions and 1 deletions

View file

@ -9,6 +9,44 @@
MCORE2 y
ENERGY_MODEL y
INTEL_TXT y
LOCKUP_DETECTOR y
HARDLOCKUP_DETECTOR y
BUG y
SECURITY_SELINUX_DISABLE n
STRICT_KERNEL_RWX y
DEBUG_CREDENTIALS y
DEBUG_NOTIFIERS y
DEBUG_SG y
DEBUG_STACKOVERFLOW y
SCHED_STACK_END_CHECK y
SHUFFLE_PAGE_ALLOCATOR y
SLUB_DEBUG y
PAGE_POISONING y
PAGE_POISONING_NO_SANITY y
PAGE_POISONING_ZERO y
SECURITY_SAFESETID y
PANIC_TIMEOUT -1
GCC_PLUGINS y
GCC_PLUGIN_LATENT_ENTROPY y
GCC_PLUGIN_STRUCTLEAK y
GCC_PLUGIN_STRUCTLEAK_BYREF_ALL y
GCC_PLUGIN_STACKLEAK y
GCC_PLUGIN_RANDSTRUCT y
GCC_PLUGIN_RANDSTRUCT_PERFORMANCE y
ACPI_CUSTOM_METHOD n
PROC_KCORE n
INET_DIAG n
'';
} ];
}

View file

@ -18,7 +18,7 @@
../../mercurial
];
boot.kernelPackages = pkgs.unstable.linuxPackages_latest_hardened;
boot.kernelPackages = pkgs.linuxPackages_latest_hardened;
boot.loader.grub = {
enable = true;
version = 2;

View file

@ -34,6 +34,7 @@
libreoffice
mindforgerPatched.mindforger
passff-host
pdfarranger
python38Packages.binwalk-full
qemu aqemu
shotwell