selinux: Use fstack-protector=all

2015-07-31 17:11:11 -07:00
parent c06b1d84f1
commit f6e554f288
4 changed files with 8 additions and 4 deletions
@@ -19,12 +19,12 @@ stdenv.mkDerivation rec {
  buildInputs = [ pkgconfig libsepol pcre ]
             ++ optionals enablePython [ swig python ];

+  NIX_CFLAGS_COMPILE = "-fstack-protector-all -std=gnu89";
+
  postPatch = optionalString enablePython ''
    sed -i -e 's|\$(LIBDIR)/libsepol.a|${libsepol}/lib/libsepol.a|' src/Makefile
  '';

-  NIX_CFLAGS_COMPILE = "-std=gnu89";
-
  preBuild = ''
    # Build fails without this precreated
    mkdir -p $out/include