diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2024-05-31 14:24:56 +0200 |
|---|---|---|
| committer | John Titor <50095635+JohnRTitor@users.noreply.github.com> | 2024-07-24 12:06:04 +0530 |
| commit | e54753495c34c8fc6df4622fce91ec8370a40e06 (patch) | |
| tree | d1d337dcaa08fb3236f71116feb2a66fc8ac8153 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | 391f0616a8bfeae409fe510642eb5aa82d1bf640 (diff) | |
linux/common-config: restrict access to dmesg
`SECURITY_DMESG_RESTRICT` is enabled by default by a lot of
other distributions for a quite a while now, NixOS is a bit of an outlier.
The main justification to enable it is that kernel log might leak kernel
pointers which can then be used by exploits to defeat KASLR (NixOS also
enables `kernel.kptr_restrict` by default since 2013).
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions