public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ntp: use seccomp on linux

Browse Source
This commit is contained in:
Franz Pletz 2016-11-21 23:11:05 +01:00
parent db66a95e5b
commit 67fd21a170
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
pkgs/tools/networking/ntp/default.nix
View File

@ -1,6 +1,7 @@
{ stdenv, fetchurl, autoreconfHook, libcap ? null, openssl ? null }: { stdenv, fetchurl, openssl, libcap ? null, libseccomp ? null }:
assert stdenv.isLinux -> libcap != null; assert stdenv.isLinux -> libcap != null;
assert stdenv.isLinux -> libseccomp != null;
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
name = "ntp-4.2.8p9"; name = "ntp-4.2.8p9";
@ -16,10 +17,12 @@ stdenv.mkDerivation rec {
"--with-openssl-libdir=${openssl.out}/lib" "--with-openssl-libdir=${openssl.out}/lib"
"--with-openssl-incdir=${openssl.dev}/include" "--with-openssl-incdir=${openssl.dev}/include"
"--enable-ignore-dns-errors" "--enable-ignore-dns-errors"
] ++ stdenv.lib.optional (libcap != null) "--enable-linuxcaps"; ] ++ stdenv.lib.optionals stdenv.isLinux [
"--enable-linuxcaps"
"--enable-libseccomp"
];
nativeBuildInputs = [ autoreconfHook ]; buildInputs = [ libcap openssl libseccomp ];
buildInputs = [ libcap openssl ];
hardeningEnable = [ "pie" ]; hardeningEnable = [ "pie" ];