···

       
17
       
17
       
 
       
    hardeningEnable = [ "pie" ];

     

       
18
       
18
       
 
       
    installPhase = ''

     

       
19
       
19
       
 
       
      mkdir -p $out/bin

     

       
20
       
20
       
-
       
      gcc -Wall -O2 -DWRAPPER_DIR=\"${parentWrapperDir}\" \

     

       
20
       
20
       
+
       
      $CC -Wall -O2 -DWRAPPER_DIR=\"${parentWrapperDir}\" \

     

       
21
       
21
       
 
       
          -lcap-ng -lcap ${./wrapper.c} -o $out/bin/security-wrapper

     

       
22
       
22
       
 
       
    '';

     

       
23
       
23
       
 
       
  };

     
···

       
79
       
79
       
 
       
                 ({ owner = "root";

     

       
80
       
80
       
 
       
                    group = "root";

     

       
81
       
81
       
 
       
                  } // s)

     

       
82
       
82
       
-
       
          else if 

     

       
82
       
82
       
+
       
          else if

     

       
83
       
83
       
 
       
             (s ? "setuid" && s.setuid) ||

     

       
84
       
84
       
 
       
             (s ? "setgid" && s.setgid) ||

     

       
85
       
85
       
 
       
             (s ? "permissions")