mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-29 10:23:29 +00:00
ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
36 lines
809 B
Nix
36 lines
809 B
Nix
{ fetchurl, lib, stdenv, elf-header }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "paxctl";
|
|
version = "0.9";
|
|
|
|
src = fetchurl {
|
|
url = "https://pax.grsecurity.net/${pname}-${version}.tar.gz";
|
|
sha256 = "0biw882fp1lmgs6kpxznp1v6758r7dg9x8iv5a06k0b82bcdsc53";
|
|
};
|
|
|
|
buildInputs = [ elf-header ];
|
|
|
|
preBuild = ''
|
|
sed -i Makefile \
|
|
-e 's|--owner 0 --group 0||g' \
|
|
-e '/CC:=gcc/d'
|
|
'';
|
|
|
|
makeFlags = [
|
|
"DESTDIR=$(out)"
|
|
"MANDIR=share/man/man1"
|
|
];
|
|
|
|
setupHook = ./setup-hook.sh;
|
|
|
|
meta = with lib; {
|
|
description = "A tool for controlling PaX flags on a per binary basis";
|
|
mainProgram = "paxctl";
|
|
homepage = "https://pax.grsecurity.net";
|
|
license = licenses.gpl2;
|
|
platforms = platforms.all;
|
|
maintainers = with maintainers; [ thoughtpolice ];
|
|
};
|
|
}
|