Merge branch 'hardened-stdenv' into staging

Closes #12895 Amazing work by @globin & @fpletz getting hardened compiler flags by enabled default on the whole package set
2016-08-22 01:19:35 +01:00
parent ba50fd7170 b092538811
commit 24a9183f90
468 changed files with 1777 additions and 1453 deletions
@@ -48,6 +48,8 @@ stdenv.mkDerivation {

  pythonPath = [ pythonPackages.curses ];

+  hardeningDisable = [ "stackprotector" "fortify" "pic" ];
+
  patches = stdenv.lib.optionals ((xenserverPatched == false) && (builtins.hasAttr "xenPatches" xenConfig)) xenConfig.xenPatches;

  postPatch = ''