diff options
author | Franz Pletz <fpletz@fnordicwalking.de> | 2016-02-26 18:38:15 +0100 |
---|---|---|
committer | Franz Pletz <fpletz@fnordicwalking.de> | 2016-03-05 18:55:26 +0100 |
commit | aff1f4ab948b921ceaf2b81610f2f82454302b4b (patch) | |
tree | 6e51e90a41409d56cfa084b9ca64921f2611fafc /pkgs/os-specific/linux/setools | |
parent | a2e449e43e82e258b94c723d92a5e9af641967e7 (diff) | |
download | nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar.gz nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar.bz2 nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar.lz nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar.xz nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.tar.zst nixpkgs-aff1f4ab948b921ceaf2b81610f2f82454302b4b.zip |
Use general hardening flag toggle lists
The following parameters are now available: * hardeningDisable To disable specific hardening flags * hardeningEnable To enable specific hardening flags Only the cc-wrapper supports this right now, but these may be reused by other wrappers, builders or setup hooks. cc-wrapper supports the following flags: * fortify * stackprotector * pie (disabled by default) * pic * strictoverflow * format * relro * bindnow
Diffstat (limited to 'pkgs/os-specific/linux/setools')
-rw-r--r-- | pkgs/os-specific/linux/setools/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/os-specific/linux/setools/default.nix b/pkgs/os-specific/linux/setools/default.nix index 6e8d9d3cf7a..5f539b9a97e 100644 --- a/pkgs/os-specific/linux/setools/default.nix +++ b/pkgs/os-specific/linux/setools/default.nix @@ -18,7 +18,7 @@ stdenv.mkDerivation rec { "--with-tcl=${tcl}/lib" ]; - hardening_format = false; + hardeningDisable = [ "format" ]; NIX_CFLAGS_COMPILE = "-fstack-protector-all"; NIX_LDFLAGS = "-L${libsepol}/lib -L${libselinux}/lib"; |