hardening: ld wrapper changes, setup-hook, etc

2018-03-06 19:21:10 -05:00
parent 634c748050
commit 806edaa0a2
8 changed files with 46 additions and 40 deletions
@@ -147,6 +147,10 @@ export ${role_pre}CXX=@named_cxx@
 export CC${role_post}=@named_cc@
 export CXX${role_post}=@named_cxx@

+# If unset, assume the default hardening flags.
+: ${NIX_HARDENING_ENABLE="fortify stackprotector pic strictoverflow format relro bindnow"}
+export NIX_HARDENING_ENABLE
+
 # No local scope in sourced file
 unset -v role_pre role_post
 set +u