nixos/security/wrappers: don't force PIE hardening (#259509)

PIE causes problems with static binaries on ARM (see 76552e9). It is
enabled by default on other platforms anyway when musl is used, so we
don't need to specify it manually.
This commit is contained in:
Ben Wolsieffer
2023-10-10 10:13:29 +02:00
committed by GitHub
parent 21de4a64c0
commit b6876d5c86
@@ -5,7 +5,6 @@ stdenv.mkDerivation {
name = "security-wrapper";
buildInputs = [ linuxHeaders ];
dontUnpack = true;
hardeningEnable = [ "pie" ];
CFLAGS = [
''-DSOURCE_PROG="${sourceProg}"''
] ++ (if debug then [