bintools-wrapper: enable stackclashprotection by default

2025-01-11 12:31:08 +00:00
parent 33e2500ef2
commit 04791f4a4d
2 changed files with 1 additions and 1 deletions
--- a/pkgs/build-support/bintools-wrapper/default.nix
+++ b/pkgs/build-support/bintools-wrapper/default.nix
@@ -43,6 +43,7 @@
    "fortify3"
    "pic"
    "relro"
+    "stackclashprotection"
    "stackprotector"
    "strictoverflow"
    "zerocallusedregs"
--- a/pkgs/top-level/stage.nix
+++ b/pkgs/top-level/stage.nix
@@ -329,7 +329,6 @@ let
            super'.stdenv.cc.defaultHardeningFlags ++ [
              "shadowstack"
              "pacret"
-              "stackclashprotection"
              "trivialautovarinit"
            ]
          ) super'.stdenv;