diff options
author | Will Dietz <w@wdtz.org> | 2018-11-14 17:49:24 -0600 |
---|---|---|
committer | Will Dietz <github@wdtz.org> | 2018-11-15 21:55:08 -0600 |
commit | db0abe98bfa7adad39912edad44743de030f8300 (patch) | |
tree | cc80c8ed42b7d580d9344e98ded1f4a7cc68932f /pkgs/development/libraries/glibc | |
parent | 6ebb2c385bc0e1d192ba3e102d67f10ada4f15cb (diff) |
glibc: disable pie hardening, limit to musl for now
Diffstat (limited to 'pkgs/development/libraries/glibc')
-rw-r--r-- | pkgs/development/libraries/glibc/default.nix | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/pkgs/development/libraries/glibc/default.nix b/pkgs/development/libraries/glibc/default.nix index 8a450959c6b2c..27a1267f0cfe1 100644 --- a/pkgs/development/libraries/glibc/default.nix +++ b/pkgs/development/libraries/glibc/default.nix @@ -35,7 +35,10 @@ callPackage ./common.nix { inherit stdenv; } { # The stackprotector and fortify hardening flags are autodetected by glibc # and enabled by default if supported. Setting it for every gcc invocation # does not work. - hardeningDisable = [ "stackprotector" "fortify" ]; + hardeningDisable = [ "stackprotector" "fortify" ] + # XXX: Not actually musl-speciic but since only musl enables pie by default, + # limit rebuilds by only disabling pie w/musl + ++ stdenv.lib.optional stdenv.hostPlatform.isMusl "pie"; # When building glibc from bootstrap-tools, we need libgcc_s at RPATH for # any program we run, because the gcc will have been placed at a new |