glibc: enable Intel CET on x86

2022-07-21 00:32:03 +02:00
parent 8f3c8aee8a
commit 1487fabf60
1 changed files with 3 additions and 0 deletions
@@ -188,6 +188,9 @@ stdenv.mkDerivation ({
      # and on aarch64 with binutils 2.30 or later.
      # https://sourceware.org/glibc/wiki/PortStatus
      "--enable-static-pie"
+    ] ++ lib.optionals stdenv.hostPlatform.isx86 [
+      # Enable Intel Control-flow Enforcement Technology (CET) support
+      "--enable-cet"
    ] ++ lib.optionals withLinuxHeaders [
      "--enable-kernel=3.2.0" # can't get below with glibc >= 2.26
    ] ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [