Use a hardened stdenv by default

2016-01-30 16:36:57 +00:00
parent c5f092c6a7
commit 954e9903ad
51 changed files with 131 additions and 9 deletions
@@ -224,10 +224,16 @@ stdenv.mkDerivation ((drvAttrs config stdenv.platform (kernelPatches ++ nativeKe
  nativeBuildInputs = [ perl bc nettools openssl ] ++ optional (stdenv.platform.uboot != null)
    (ubootChooser stdenv.platform.uboot);

+  noHardening_format = true;
+  noHardening_fortify = true;
+  noHardening_stackprotector = true;
+
  makeFlags = commonMakeFlags ++ [
    "ARCH=${stdenv.platform.kernelArch}"
  ];

+  noHardening_pic = true;
+
  karch = stdenv.platform.kernelArch;

  crossAttrs = let cp = stdenv.cross.platform; in