switch hardening flags

2016-01-23 21:19:59 +00:00
parent 954e9903ad
commit f6d3b7a2ae
51 changed files with 68 additions and 63 deletions
--- a/pkgs/development/libraries/glibc/common.nix
+++ b/pkgs/development/libraries/glibc/common.nix
@@ -214,7 +214,7 @@ stdenv.mkDerivation ({
 }

 // stdenv.lib.optionalAttrs (name == "glibc-locales") {
-  noHardening_stackprotector = true;
+  hardening_stackprotector = false;
 }

 // stdenv.lib.optionalAttrs (hurdHeaders != null) {
--- a/pkgs/development/libraries/glibc/default.nix
+++ b/pkgs/development/libraries/glibc/default.nix
@@ -25,7 +25,8 @@ in

    builder = ./builder.sh;

-    noHardening_all = true;
+    hardening_stackprotector = false;
+    hardening_fortify = false;

    # When building glibc from bootstrap-tools, we need libgcc_s at RPATH for
    # any program we run, because the gcc will have been placed at a new