Use general hardening flag toggle lists
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
This commit is contained in:
@@ -8,7 +8,7 @@ stdenv.mkDerivation {
|
||||
sha256 = "6aef02b92d10360ac9be0db29ae390636be55017990063a092a285c70b54e666";
|
||||
};
|
||||
|
||||
hardening_pic = false;
|
||||
hardeningDisable = [ "pic" ];
|
||||
|
||||
makeFlags = [
|
||||
"KBASE=${kernel.dev}/lib/modules/${kernel.modDirVersion}"
|
||||
|
||||
Reference in New Issue
Block a user