public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

bind: disable seccomp by default

Browse Source 
Fixes #25645 & #23431.
This commit is contained in:
Franz Pletz 2017-05-09 18:10:06 +02:00
parent 326efe5fdc
commit eb79649414
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pkgs/servers/dns/bind/default.nix
View File

@ -1,5 +1,7 @@
{ stdenv, lib, fetchurl, openssl, libtool, perl, libxml2 { stdenv, lib, fetchurl, openssl, libtool, perl, libxml2
, libseccomp ? null }: , enableSeccomp ? false, libseccomp ? null }:
assert enableSeccomp -> libseccomp != null;
let version = "9.10.4-P6"; in let version = "9.10.4-P6"; in
@ -17,7 +19,7 @@ stdenv.mkDerivation rec {
stdenv.lib.optional stdenv.isDarwin ./darwin-openssl-linking-fix.patch; stdenv.lib.optional stdenv.isDarwin ./darwin-openssl-linking-fix.patch;
buildInputs = [ openssl libtool perl libxml2 ] ++ buildInputs = [ openssl libtool perl libxml2 ] ++
stdenv.lib.optional stdenv.isLinux libseccomp; stdenv.lib.optional enableSeccomp libseccomp;
STD_CDEFINES = [ "-DDIG_SIGCHASE=1" ]; # support +sigchase STD_CDEFINES = [ "-DDIG_SIGCHASE=1" ]; # support +sigchase
@ -35,7 +37,7 @@ stdenv.mkDerivation rec {
"--without-pkcs11" "--without-pkcs11"
"--without-purify" "--without-purify"
"--without-python" "--without-python"
] ++ lib.optional (stdenv.isi686 || stdenv.isx86_64) "--enable-seccomp"; ] ++ lib.optional enableSeccomp "--enable-seccomp";
postInstall = '' postInstall = ''
moveToOutput bin/bind9-config $dev moveToOutput bin/bind9-config $dev