public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Simplifying the wrapper program derivation

Browse Source
This commit is contained in:
Parnell Springmeyer 2017-02-14 08:27:40 -06:00
parent fb6d13c01a
commit f8b8c353ff
No known key found for this signature in database
GPG Key ID: DCCF89258EAD874A
1 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nixos/modules/security/wrappers/default.nix
View File

@ -10,16 +10,14 @@ let
securityWrapper = pkgs.stdenv.mkDerivation { securityWrapper = pkgs.stdenv.mkDerivation {
name = "security-wrapper"; name = "security-wrapper";
unpackPhase = "true"; phases = [ "installPhase" "fixupPhase" ];
buildInputs = [ pkgs.libcap pkgs.libcap_ng pkgs.linuxHeaders ];
hardeningEnable = [ "pie" ];
installPhase = '' installPhase = ''
mkdir -p $out/bin mkdir -p $out/bin
parentWrapperDir=$(dirname ${wrapperDir}) parentWrapperDir=$(dirname ${wrapperDir})
gcc -Wall -O2 -DWRAPPER_DIR=\"$parentWrapperDir\" \ gcc -Wall -O2 -DWRAPPER_DIR=\"$parentWrapperDir\" \
-Wformat -Wformat-security -Werror=format-security \ -lcap-ng -lcap ${./wrapper.c} -o $out/bin/security-wrapper
-fstack-protector-strong --param ssp-buffer-size=4 \
-D_FORTIFY_SOURCE=2 -fPIC \
-lcap-ng -lcap ${./wrapper.c} -o $out/bin/security-wrapper -L ${pkgs.libcap.lib}/lib -L ${pkgs.libcap_ng}/lib \
-I ${pkgs.libcap.dev}/include -I ${pkgs.libcap_ng}/include -I ${pkgs.linuxHeaders}/include
''; '';
}; };