summaryrefslogtreecommitdiffstats
path: root/fragments/base/security (unfollow)
Commit message (Collapse)AuthorLines
2021-07-20fragments: Remove obsoleted KSP switchWolfgang Müller-1/+0
The newer versions of sys-kernel/gentoo-sources do not have this switch anymore, instead relying only on the architecture-specific switches. Remove it.
2021-07-03fragments: Enable GENTOO_KERNEL_SELF_PROTECTIONWolfgang Müller-0/+3
This setting pulls in a set of recommended settings [1] from the Kernel Self Protection Project. We are pretty sure that we exhaustively set all these manually already, but since Gentoo upstream provides this option, make use of it too. [1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2021-03-06fragments: Remove superfluous options for 5.10Wolfgang Müller-1/+0
These options have either been merged into others or enabled unconditionally.
2020-02-29Improve security by disabling vsyscall table for legacy appsWynn Wolf Arbor-0/+3