security/fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 25 Wiki Activity

nix: expose compat flag in nixos module
All checks were successful
Test / Create distribution (push) Successful in 1m55s
Details
Test / Run NixOS test (push) Successful in 4m6s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-01-25 12:42:48 +09:00
parent 37780456a7
commit 016da20443
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos.nix
View File

@ -118,7 +118,7 @@ in
env env
; ;
syscall = { syscall = {
inherit (app) multiarch bluetooth; inherit (app) compat multiarch bluetooth;
deny_devel = !app.devel; deny_devel = !app.devel;
}; };
map_real_uid = app.mapRealUid; map_real_uid = app.mapRealUid;

1
options.nix
View File

@ -151,6 +151,7 @@ in
default = true; default = true;
}; };
compat = mkEnableOption "disable syscall filter extensions";
devel = mkEnableOption "development kernel APIs"; devel = mkEnableOption "development kernel APIs";
multiarch = mkEnableOption "multiarch kernel support"; multiarch = mkEnableOption "multiarch kernel support";
bluetooth = mkEnableOption "AF_BLUETOOTH socket operations"; bluetooth = mkEnableOption "AF_BLUETOOTH socket operations";