mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-18 11:40:45 +00:00
Code Issues Wiki Activity

linuxPackages_4_14_hardened: fix eval

Browse source 
Not sure if this is the right thing to do, but apparently we want this
setting for <4.18, so we hard-code it for 4.14 via `mkForce` (previously
this has led to conflicting definitions which is why the hardened 4.14
kernel never seems to have evaluated properly).
This commit is contained in:
Maximilian Bosch 2021-08-16 11:44:02 +02:00
parent a5341beb78
commit 099113751e
No known key found for this signature in database
GPG key ID: 091DBF4D1FC46B8E
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pkgs/os-specific/linux/kernel/hardened/config.nix
View file

@ -88,7 +88,7 @@ assert (versionAtLeast version "4.9");
INET_MPTCP_DIAG = option no;
# Use -fstack-protector-strong (gcc 4.9+) for best stack canary coverage.
CC_STACKPROTECTOR_REGULAR = whenOlder "4.18" no;
CC_STACKPROTECTOR_REGULAR = lib.mkForce (whenOlder "4.18" no);
CC_STACKPROTECTOR_STRONG = whenOlder "4.18" yes;
# Detect out-of-bound reads/writes and use-after-free