nix: disable shadowstack hardening flag

2024-07-28 17:40:54 +01:00
parent b84da125d0
commit 0dacfda0af
1 changed files with 3 additions and 1 deletions
@@ -101,7 +101,9 @@ self = stdenv.mkDerivation {

  hardeningEnable = lib.optionals (!stdenv.isDarwin) [ "pie" ];

-  hardeningDisable = lib.optional stdenv.hostPlatform.isMusl "fortify";
+  hardeningDisable = [
+    "shadowstack"
+  ] ++ lib.optional stdenv.hostPlatform.isMusl "fortify";

  nativeBuildInputs = [
    pkg-config