Joachim Fasting d4d7bfe07b grsecurity: add option to disable chroot caps restriction ...

The chroot caps restriction disallows chroot'ed processes from running
any command that requires `CAP_SYS_ADMIN`, breaking `nixos-rebuild`. See
e.g., https://github.com/NixOS/nixpkgs/issues/15293

This significantly weakens chroot protections, but to break
nixos-rebuild out of the box is too severe.

2016-05-10 16:17:08 +02:00

11 KiB

Raw Blame History

View Raw