wireguard: disable build against -grsec kernels

Looks to be incompatible with the PaX constification plugin:

> /tmp/nix-build-wireguard-unstable-2016-08-08.drv-0/WireGuard-experimental-0.0.20160808/src/device.c:329:29: error: constified variable 'link_ops' placed into writable section ".data..read_mostly"
 static struct rtnl_link_ops link_ops __read_mostly = {

https://hydra.nixos.org/build/39671573/log/raw

See also https://github.com/NixOS/nixpkgs/issues/18209
This commit is contained in:
Joachim Fasting 2016-09-03 14:42:08 +02:00
parent fc0b40328d
commit ca465eeeb1
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08

View File

@ -2,6 +2,8 @@
# module requires Linux >= 4.1 https://www.wireguard.io/install/#kernel-requirements
assert kernel != null -> stdenv.lib.versionAtLeast kernel.version "4.1";
# module is incompatible with the PaX constification plugin
assert kernel != null -> !(kernel.features.grsecurity or false);
let
name = "wireguard-unstable-${version}";