diff options
| author | Robert Scott <code@humanleg.org.uk> | 2023-04-05 15:08:10 +0100 |
|---|---|---|
| committer | Robert Scott <code@humanleg.org.uk> | 2023-06-25 11:50:46 +0100 |
| commit | db3e94c3b2046108932442d0b9c77711d4588574 (patch) | |
| tree | f921ca6338e1a62f02b39376d17d1b15a616b420 /pkgs/build-support/cc-wrapper | |
| parent | da7359f8c71a23afa66b4cc2a0972c0c9730e420 (diff) | |
hardening flags: enable fortify3 by default
Diffstat (limited to 'pkgs/build-support/cc-wrapper')
| -rw-r--r-- | pkgs/build-support/cc-wrapper/setup-hook.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/build-support/cc-wrapper/setup-hook.sh b/pkgs/build-support/cc-wrapper/setup-hook.sh index be01c51a71ffd..9326d76e2a8ff 100644 --- a/pkgs/build-support/cc-wrapper/setup-hook.sh +++ b/pkgs/build-support/cc-wrapper/setup-hook.sh @@ -111,7 +111,7 @@ export CC${role_post}=@named_cc@ export CXX${role_post}=@named_cxx@ # If unset, assume the default hardening flags. -: ${NIX_HARDENING_ENABLE="fortify stackprotector pic strictoverflow format relro bindnow"} +: ${NIX_HARDENING_ENABLE="fortify fortify3 stackprotector pic strictoverflow format relro bindnow"} export NIX_HARDENING_ENABLE # No local scope in sourced file |