nix: disable shadowstack hardening flag

NixOS · Jul 20, 2024 · b3165be · b3165be
1 parent 4530470
commit b3165be
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkgs/tools/package-management/nix/common.nix b/pkgs/tools/package-management/nix/common.nix
@@ -101,7 +101,9 @@ self = stdenv.mkDerivation {
 
  hardeningEnable = lib.optionals (!stdenv.isDarwin) [ "pie" ];
 
- hardeningDisable = lib.optional stdenv.hostPlatform.isMusl "fortify";
+ hardeningDisable = [
+ "shadowstack"
+ ] ++ lib.optional stdenv.hostPlatform.isMusl "fortify";
 
  nativeBuildInputs = [
  pkg-config