mirror of
https://github.com/NixOS/nixos-hardware.git
synced 2025-11-06 18:08:38 +08:00
b09586b101
The broadcom-sta driver package is marked as insecure due to CVE-2019-9501 and CVE-2019-9502 (heap buffer overflow vulnerabilities allowing remote code execution). The driver is also unmaintained and incompatible with modern Linux kernel security mitigations. Removed broadcom_sta from extraModulePackages and the corresponding "wl" kernel module. This resolves test failures where Nixpkgs refuses to evaluate configurations containing this insecure package.
38 lines
629 B
Nix
38 lines
629 B
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
../.
|
|
../../../common/cpu/intel
|
|
../../../common/gpu/nvidia
|
|
../../../common/gpu/nvidia/kepler
|
|
../../../common/hidpi.nix
|
|
];
|
|
|
|
boot = {
|
|
initrd.kernelModules = [
|
|
"applesmc"
|
|
"applespi"
|
|
"intel_lpss_pci"
|
|
"spi_pxa2xx_platform"
|
|
"kvm-intel"
|
|
];
|
|
blacklistedKernelModules = [
|
|
"b43"
|
|
"ssb"
|
|
"brcmfmac"
|
|
"brcmsmac"
|
|
"bcma"
|
|
];
|
|
kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "6.0") pkgs.linuxPackages_latest;
|
|
};
|
|
|
|
hardware = {
|
|
bluetooth.enable = lib.mkDefault true;
|
|
};
|
|
}
|