mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-09-11 15:08:33 +01:00
Code Issues Wiki Activity

stdenv: promote zerocallusedregs to defaultHardeningFlags

Browse source
This commit is contained in:
Robert Scott 2024-06-01 13:00:17 +01:00
parent c85826c3df
commit dd80ca4d00
2 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
pkgs/build-support/bintools-wrapper/default.nix
View file

@ -45,6 +45,7 @@
"relro"
"stackprotector"
"strictoverflow"
"zerocallusedregs"
] ++ lib.optional (with stdenvNoCC;
# Musl-based platforms will keep "pie", other platforms will not.
# If you change this, make sure to update section `{#sec-hardening-in-nixpkgs}`

1
pkgs/top-level/stage.nix
View file

@ -292,7 +292,6 @@ let
pkgsExtraHardening = super';
stdenv = super'.withDefaultHardeningFlags (
super'.stdenv.cc.defaultHardeningFlags ++ [
"zerocallusedregs"
"trivialautovarinit"
]
) super'.stdenv;