grsecurity module: correct internal note

2016-08-01 15:56:09 +02:00
parent 5d11dac8bb
commit d1572d06fe
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/security/grsecurity.nix
+++ b/nixos/modules/security/grsecurity.nix
@@ -97,7 +97,7 @@ in

    # Configure system tunables
    boot.kernel.sysctl = {
-      # Removed under grsecurity
+      # Read-only under grsecurity
      "kernel.kptr_restrict" = mkForce null;
    } // optionalAttrs config.nix.useSandbox {
      # chroot(2) restrictions that conflict with sandboxed Nix builds