public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use general hardening flag toggle lists

Browse Source 
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
This commit is contained in:
Franz Pletz
2016-03-05 18:55:26 +01:00
parent a2e449e43e
commit aff1f4ab94
309 changed files with 366 additions and 373 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/tools/misc/grub/trusted.nix
+1 -2
View File
@@ -47,8 +47,7 @@ stdenv.mkDerivation rec {
buildInputs = [ ncurses libusb freetype gettext devicemapper ]
++ optional doCheck qemu;
hardening_stackprotector = false;
hardening_pic = false;
hardeningDisable = [ "stackprotector" "pic" ];
preConfigure =
'' for i in "tests/util/"*.in