lix: disable shadowstack hardening flag

2024-07-28 17:40:54 +01:00
parent 7a4736e1ef
commit b84da125d0
1 changed files with 5 additions and 2 deletions
@@ -245,8 +245,11 @@ stdenv.mkDerivation {
    meson test --no-rebuild "''${flagsArray[@]}"
    runHook postInstallCheck
  '';
-  # strictoverflow is disabled because we trap on signed overflow instead
-  hardeningDisable = [ "strictoverflow" ] ++ lib.optional stdenv.hostPlatform.isStatic "pie";
+  hardeningDisable = [
+    "shadowstack"
+    # strictoverflow is disabled because we trap on signed overflow instead
+    "strictoverflow"
+  ] ++ lib.optional stdenv.hostPlatform.isStatic "pie";
  # hardeningEnable = lib.optionals (!stdenv.isDarwin) [ "pie" ];
  # hardeningDisable = lib.optional stdenv.hostPlatform.isMusl "fortify";
  separateDebugInfo = stdenv.isLinux && !enableStatic;