pyrox.dev / nixpkgs
lol
fork atom

nixos/security/wrappers: don't force PIE hardening (#259509)

PIE causes problems with static binaries on ARM (see 76552e9). It is
enabled by default on other platforms anyway when musl is used, so we
don't need to specify it manually.

Ben Wolsieffer b6876d5c 21de4a64

options
unified split
Changed files
-1
nixos
modules
security
wrappers
wrapper.nix
-1
nixos/modules/security/wrappers/wrapper.nix 
···

       
5

       
5

       
 

       
  name = "security-wrapper";


     

       
6

       
6

       
 

       
  buildInputs = [ linuxHeaders ];


     

       
7

       
7

       
 

       
  dontUnpack = true;


     

       
8

       

       
-

       
  hardeningEnable = [ "pie" ];


     

       
9

       
8

       
 

       
  CFLAGS = [


     

       
10

       
9

       
 

       
    ''-DSOURCE_PROG="${sourceProg}"''


     

       
11

       
10

       
 

       
  ] ++ (if debug then [