Branch: refs/heads/master
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 78bb734452a76c7719f2224e5add5b2a12b3fbf6
      
https://github.com/NixOS/nixpkgs/commit/78bb734452a76c7719f2224e5add5b2a12b3fbf6
  Author: Eelco Dolstra <[email protected]>
  Date:   2017-03-21 (Tue, 21 Mar 2017)

  Changed paths:
    M nixos/modules/services/misc/nix-daemon.nix

  Log Message:
  -----------
  nix-daemon.nix: Make the 1.12 check less strict


  Commit: 86721a5f78718caf10c578e9501f8b4d19c0eb44
      
https://github.com/NixOS/nixpkgs/commit/86721a5f78718caf10c578e9501f8b4d19c0eb44
  Author: Eelco Dolstra <[email protected]>
  Date:   2017-03-21 (Tue, 21 Mar 2017)

  Changed paths:
    M nixos/doc/manual/release-notes/rl-1703.xml
    M nixos/modules/config/sysctl.nix

  Log Message:
  -----------
  Allow attaching to non-child processes by default

The inability to run strace or gdb is the kind of
developer-unfriendliness that we're used to from OS X, let's not do it
on NixOS.

This restriction can be re-enabled by setting

  boot.kernel.sysctl."kernel.yama.ptrace_scope" = 1;

It might be nice to have a NixOS module for enabling hardened defaults.

Xref #14392.

Thanks @abbradar.


Compare: https://github.com/NixOS/nixpkgs/compare/8467757481e7...86721a5f7871
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to