Merge branch 'hardened-stdenv' into staging

Closes #12895 Amazing work by @globin & @fpletz getting hardened compiler flags by enabled default on the whole package set
2016-08-22 01:19:35 +01:00
parent ba50fd7170 b092538811
commit 24a9183f90
468 changed files with 1777 additions and 1453 deletions
@@ -33,6 +33,8 @@ in
      makeFlagsArray+=("bindir=$bin/bin" "sbindir=$bin/sbin" "rootsbindir=$bin/sbin")
    '';

+    hardeningDisable = [ "stackprotector" "fortify" ];
+
    # When building glibc from bootstrap-tools, we need libgcc_s at RPATH for
    # any program we run, because the gcc will have been placed at a new
    # store path than that determined when built (as a source for the