Unverified Commit 9a6aabc4 authored by Robert Scott's avatar Robert Scott Committed by GitHub
Browse files

Merge pull request #223548 from enc0urage/fix-graphene-hardened 

nixos/malloc: set vm.max_map_count when using graphene-hardened
parents bede0015 a76bd96e

nixos/modules/config/malloc.nix

+1 −0
Original line number Diff line number Diff line
@@ -97,6 +97,7 @@ in 
  };



  config = mkIf (cfg.provider != "libc") {

    boot.kernel.sysctl."vm.max_map_count" = mkIf (cfg.provider == "graphene-hardened") (mkDefault 1048576);

    environment.etc."ld-nix.so.preload".text = ''

      ${providerLibPath}

    '';