futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gnu: linux-libre: Restrict ‘dmesg’ to privileged users.

Browse Source 
* gnu/packages/linux.scm (%default-extra-linux-options):
Set CONFIG_SECURITY_DMESG_RESTRICT.
This commit is contained in:
Tobias Geerinckx-Rice 2019-07-17 09:09:15 +02:00
parent 4b0356590a
commit 24446ce299
No known key found for this signature in database
GPG Key ID: 0DB0FF884F556D79
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
gnu/packages/linux.scm
View File

@ -561,7 +561,9 @@ for ARCH and optionally VARIANT, or #f if there is no such configuration."
(search-auxiliary-file file))) (search-auxiliary-file file)))
(define %default-extra-linux-options (define %default-extra-linux-options
`(;; Modules required for initrd: `(;; Some very mild hardening.
("CONFIG_SECURITY_DMESG_RESTRICT" . #t)
;; Modules required for initrd:
("CONFIG_NET_9P" . m) ("CONFIG_NET_9P" . m)
("CONFIG_NET_9P_VIRTIO" . m) ("CONFIG_NET_9P_VIRTIO" . m)
("CONFIG_VIRTIO_BLK" . m) ("CONFIG_VIRTIO_BLK" . m)