summary refs log tree commit diff
diff options
context:
space:
mode:
authoradisbladis <adisbladis@gmail.com>2018-01-14 23:37:38 +0800
committerGitHub <noreply@github.com>2018-01-14 23:37:38 +0800
commit940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee (patch)
tree860afccd2bb38aac47cfd1824d09a179fae49a42
parenta6af522217275bfec452bf66102926523758ed2d (diff)
parentcb6a25db0aff4548469d13a2c21b6daa5ba1844e (diff)
downloadnixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar.gz
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar.bz2
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar.lz
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar.xz
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.tar.zst
nixpkgs-940d1a99f9f6f83a75f1d7ceb9e7d7f0d69610ee.zip
Merge pull request #33858 from dotlambda/spectre-meltdown-checker
spectre-meltdown-checker: init at 0.29
-rw-r--r--pkgs/tools/security/spectre-meltdown-checker/default.nix39
-rw-r--r--pkgs/top-level/all-packages.nix2
2 files changed, 41 insertions, 0 deletions
diff --git a/pkgs/tools/security/spectre-meltdown-checker/default.nix b/pkgs/tools/security/spectre-meltdown-checker/default.nix
new file mode 100644
index 00000000000..9c12a4fa106
--- /dev/null
+++ b/pkgs/tools/security/spectre-meltdown-checker/default.nix
@@ -0,0 +1,39 @@
+{ stdenv, fetchFromGitHub, fetchpatch, makeWrapper, binutils-unwrapped }:
+
+stdenv.mkDerivation rec {
+  name = "spectre-meltdown-checker-${version}";
+  version = "0.29";
+
+  src = fetchFromGitHub {
+    owner = "speed47";
+    repo = "spectre-meltdown-checker";
+    rev = "v${version}";
+    sha256 = "14i9gx1ngs3ixjirlx4qd87pmac916rvv9y61a5f7nl0dig4awl4";
+  };
+
+  patches = fetchpatch {
+    url = "https://github.com/speed47/spectre-meltdown-checker/pull/79.patch";
+    sha256 = "185kac5r97s3dnihgpwx4aashnzffb1f09xv9jw409g7i6cv2sq9";
+  };
+
+  prePatch = ''
+    substituteInPlace spectre-meltdown-checker.sh \
+      --replace /bin/echo echo
+  '';
+
+  nativeBuildInputs = [ makeWrapper ];
+
+  installPhase = with stdenv.lib; ''
+    install -Dt $out/lib spectre-meltdown-checker.sh
+    makeWrapper $out/lib/spectre-meltdown-checker.sh $out/bin/spectre-meltdown-checker \
+      --prefix PATH : ${makeBinPath [ binutils-unwrapped ]}
+  '';
+
+  meta = with stdenv.lib; {
+    description = "Spectre & Meltdown vulnerability/mitigation checker for Linux";
+    homepage = https://github.com/speed47/spectre-meltdown-checker;
+    license = licenses.gpl3;
+    platforms = platforms.linux;
+    maintainers = with maintainers; [ dotlambda ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 0b90f81a197..c6063ac59d2 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -4627,6 +4627,8 @@ with pkgs;
 
   sparsehash = callPackage ../development/libraries/sparsehash { };
 
+  spectre-meltdown-checker = callPackage ../tools/security/spectre-meltdown-checker { };
+
   spiped = callPackage ../tools/networking/spiped { };
 
   sqliteman = callPackage ../applications/misc/sqliteman { };