linux_*_hardened: don't set MODIFY_LDT_SYSCALL

Upstreamed in anthraxx/linux-hardened@05644876fa.
This commit is contained in:
Emily
2020-04-17 16:13:39 +01:00
parent 8efe83c22e
commit 8c68055432
@@ -17,10 +17,6 @@ with (stdenv.lib.kernel.whenHelpers version);
assert (versionAtLeast version "4.9");
optionalAttrs (stdenv.hostPlatform.platform.kernelArch == "x86_64") {
# Note: this config depends on EXPERT y and so will not take effect, hence
# it is left "optional" for now.
MODIFY_LDT_SYSCALL = option no;
# Randomize position of kernel and memory.
RANDOMIZE_BASE = yes;
RANDOMIZE_MEMORY = yes;