kernel: set nx bit on module ro segments

Fixes #4757.
2016-06-03 15:41:47 +02:00
parent 4c5fdf42ed
commit 4c99d22f19
1 changed files with 3 additions and 0 deletions
@@ -255,6 +255,9 @@ with stdenv.lib;
    SQUASHFS_LZ4 y
  ''}

+  # Runtime security tests
+  DEBUG_SET_MODULE_RONX? y # Detect writes to read-only module pages
+
  # Security related features.
  STRICT_DEVMEM y # Filter access to /dev/mem
  SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default