movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

grsecurity doc: describe work-around for gitlab

Browse source 
Fixes https://github.com/NixOS/nixpkgs/issues/20959
This commit is contained in:
Joachim Fasting 2016-12-07 04:53:55 +01:00
parent 8ff31be4c2
commit f39d13cd3e
No known key found for this signature in database
GPG key ID: 7544761007FE4E08
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
nixos/modules/security/grsecurity.xml
View file

@ -325,6 +325,19 @@
</programlisting> </programlisting>
</para></listitem> </para></listitem>
<listitem><para>
The gitlab service (<xref linkend="module-services-gitlab" />)
requires a variant of the <literal>ruby</literal> interpreter
built without `mprotect()` hardening, as in
<programlisting>
services.gitlab.packages.gitlab = pkgs.gitlab.override {
ruby = pkgs.ruby.overrideAttrs (attrs: {
postFixup = "paxmark m $out/bin/ruby";
});
};
</programlisting>
</para></listitem>
</itemizedlist> </itemizedlist>
</sect1> </sect1>