tests.hardeningFlags: use --nobranchprotection for hardening-check

introduced with new debian-devscripts
2025-05-24 11:10:22 +01:00
parent 31e6de5f70
commit c4bc940195
1 changed files with 1 additions and 1 deletions
@@ -116,7 +116,7 @@ let
      (
        ''
          if ${lib.optionalString (!expectFailure) "!"} {
-            hardening-check --nocfprotection \
+            hardening-check --nocfprotection --nobranchprotection \
              ${lib.optionalString ignoreBindNow "--nobindnow"} \
              ${lib.optionalString ignoreFortify "--nofortify"} \
              ${lib.optionalString ignorePie "--nopie"} \