Merge branch 'hardened-stdenv' into staging

Closes #12895 Amazing work by @globin & @fpletz getting hardened compiler flags by enabled default on the whole package set
2016-08-22 01:19:35 +01:00
parent ba50fd7170 b092538811
commit 24a9183f90
468 changed files with 1777 additions and 1453 deletions
@@ -222,6 +222,8 @@ stdenv.mkDerivation ((drvAttrs config stdenv.platform (kernelPatches ++ nativeKe
  nativeBuildInputs = [ perl bc nettools openssl ] ++ optional (stdenv.platform.uboot != null)
    (ubootChooser stdenv.platform.uboot);

+  hardeningDisable = [ "bindnow" "format" "fortify" "stackprotector" "pic" ];
+
  makeFlags = commonMakeFlags ++ [
    "ARCH=${stdenv.platform.kernelArch}"
  ];