mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-28 18:03:04 +00:00
Enable CC_STACKPROTECTOR_REGULAR on linux 3.14+
This commit is contained in:
parent
0b1e408b6b
commit
0c66dbaee6
@ -167,8 +167,10 @@ with stdenv.lib;
|
||||
STRICT_DEVMEM y # Filter access to /dev/mem
|
||||
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
|
||||
DEVKMEM n # Disable /dev/kmem
|
||||
${optionalString (versionOlder version "3.14") ''
|
||||
${if versionOlder version "3.14" then ''
|
||||
CC_STACKPROTECTOR y # Detect buffer overflows on the stack
|
||||
'' else ''
|
||||
CC_STACKPROTECTOR_REGULAR y
|
||||
''}
|
||||
${optionalString (versionAtLeast version "3.12") ''
|
||||
USER_NS y # Support for user namespaces
|
||||
|
Loading…
Reference in New Issue
Block a user