aboutsummaryrefslogtreecommitdiff
path: root/nixos/doc/manual/release-notes/rl-1609.xml
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-07-12 20:22:20 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-07-23 19:09:47 +0200
commitedbaba6d3cf84ca86a6fb939ec6099f20c691ed6 (patch)
tree9c7bb7a3f6d983842d4bb28b1b6d8c067237bcc0 /nixos/doc/manual/release-notes/rl-1609.xml
parent190890cdac51c6be80a1929747c2b6bd9f9ca6cc (diff)
nixos release notes: document changes to grsecurity/PaX
Diffstat (limited to 'nixos/doc/manual/release-notes/rl-1609.xml')
-rw-r--r--nixos/doc/manual/release-notes/rl-1609.xml11
1 files changed, 8 insertions, 3 deletions
diff --git a/nixos/doc/manual/release-notes/rl-1609.xml b/nixos/doc/manual/release-notes/rl-1609.xml
index be175a54c232..0bea6cbbf2dd 100644
--- a/nixos/doc/manual/release-notes/rl-1609.xml
+++ b/nixos/doc/manual/release-notes/rl-1609.xml
@@ -45,9 +45,14 @@ following incompatible changes:</para>
<para>Other notable improvements:</para>
<itemizedlist>
- <listitem>
- <para>todo</para>
- </listitem>
+
+ <listitem><para>Revamped grsecurity/PaX support. There is now only a single
+ general-purpose distribution kernel and the configuration interface has been
+ streamlined. Desktop users should be able to simply set
+ <programlisting>security.grsecurity.enable = true</programlisting> to get
+ a reasonably secure system without having to sacrifice too much
+ functionality. See <xref linkend="sec-grsecurity" /> for documentation
+ </para></listitem>
</itemizedlist>