lix: disable "shadowstack" hardening flag

NixOS · Jul 18, 2024 · 1dcb0bc · 1dcb0bc
1 parent 57ba65a
commit 1dcb0bc
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/pkgs/tools/package-management/lix/common.nix b/pkgs/tools/package-management/lix/common.nix
@@ -245,8 +245,11 @@ stdenv.mkDerivation {
  meson test --no-rebuild "''${flagsArray[@]}"
  runHook postInstallCheck
  '';
- # strictoverflow is disabled because we trap on signed overflow instead
- hardeningDisable = [ "strictoverflow" ] ++ lib.optional stdenv.hostPlatform.isStatic "pie";
+ hardeningDisable = [
+ "shadowstack"
+ # strictoverflow is disabled because we trap on signed overflow instead
+ "strictoverflow"
+ ] ++ lib.optional stdenv.hostPlatform.isStatic "pie";
  # hardeningEnable = lib.optionals (!stdenv.isDarwin) [ "pie" ];
  # hardeningDisable = lib.optional stdenv.hostPlatform.isMusl "fortify";
  separateDebugInfo = stdenv.isLinux && !enableStatic;