From c4bc9401957e4ee1c773c1e7d670ce34c95f9780 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sat, 24 May 2025 01:37:21 +0100 Subject: [PATCH] tests.hardeningFlags: use --nobranchprotection for hardening-check introduced with new debian-devscripts --- pkgs/test/cc-wrapper/hardening.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/test/cc-wrapper/hardening.nix b/pkgs/test/cc-wrapper/hardening.nix index 2124b58d340d..5ae8a0196873 100644 --- a/pkgs/test/cc-wrapper/hardening.nix +++ b/pkgs/test/cc-wrapper/hardening.nix @@ -116,7 +116,7 @@ let ( '' if ${lib.optionalString (!expectFailure) "!"} { - hardening-check --nocfprotection \ + hardening-check --nocfprotection --nobranchprotection \ ${lib.optionalString ignoreBindNow "--nobindnow"} \ ${lib.optionalString ignoreFortify "--nofortify"} \ ${lib.optionalString ignorePie "--nopie"} \