linux: Disable /dev/kmem

See e.g. https://wiki.ubuntu.com/Security/Features#A.2BAC8-dev.2BAC8-kmem_disabled
2013-08-01 00:08:44 +02:00 · 2013-08-01 00:08:44 +02:00 · bc8186be1e
commit bc8186be1e
parent e1a7be4294
1 changed files with 2 additions and 1 deletions
--- a/pkgs/os-specific/linux/kernel/common-config.nix
+++ b/pkgs/os-specific/linux/kernel/common-config.nix
@ -163,7 +163,8 @@ with stdenv.lib;

  # Security related features.
  STRICT_DEVMEM y # Filter access to /dev/mem
-  SECURITY_SELINUX_BOOTPARAM_VALUE 0 # disable SELinux by default
+  SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
+  DEVKMEM n # Disable /dev/kmem

  # Misc. options.
  8139TOO_8129 y