Skip to content

Commit

Permalink
glibc: disable pie hardening, limit to musl for now
Browse files Browse the repository at this point in the history
  • Loading branch information
dtzWill committed Nov 16, 2018
1 parent 6ebb2c3 commit db0abe9
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion pkgs/development/libraries/glibc/default.nix
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,10 @@ callPackage ./common.nix { inherit stdenv; } {
# The stackprotector and fortify hardening flags are autodetected by glibc
# and enabled by default if supported. Setting it for every gcc invocation
# does not work.
hardeningDisable = [ "stackprotector" "fortify" ];
hardeningDisable = [ "stackprotector" "fortify" ]
# XXX: Not actually musl-speciic but since only musl enables pie by default,
# limit rebuilds by only disabling pie w/musl
++ stdenv.lib.optional stdenv.hostPlatform.isMusl "pie";

# When building glibc from bootstrap-tools, we need libgcc_s at RPATH for
# any program we run, because the gcc will have been placed at a new
Expand Down

0 comments on commit db0abe9

Please sign in to comment.