From 41cae89e6b8a7f1f6fffd0e965c8db43e3e47db4 Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Wed, 19 Jun 2024 20:01:41 +0100
Subject: [PATCH] glibc: enableCETRuntimeDefault for pkgsExtraHardening

---
 pkgs/top-level/stage.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/top-level/stage.nix b/pkgs/top-level/stage.nix
index 648b81f95a5c..fbd7ea458ba9 100644
--- a/pkgs/top-level/stage.nix
+++ b/pkgs/top-level/stage.nix
@@ -297,6 +297,10 @@ let
               "trivialautovarinit"
             ]
           ) super'.stdenv;
+          glibc = super'.glibc.override rec {
+            enableCET = if self'.stdenv.hostPlatform.isx86_64 then "permissive" else false;
+            enableCETRuntimeDefault = enableCET != false;
+          };
         })
       ] ++ overlays;
     };