selinux: Use fstack-protector=all

2015-07-31 17:11:11 -07:00
parent c06b1d84f1
commit f6e554f288
4 changed files with 8 additions and 4 deletions
@@ -13,6 +13,8 @@ stdenv.mkDerivation rec {
  nativeBuildInputs = [ bison flex ];
  buildInputs = [ libsepol ];

+  NIX_CFLAGS_COMPILE = "-fstack-protector-all";
+
  # Don't build tests
  postPatch = ''
    sed -i '/-C test/d' Makefile