selinux: Use fstack-protector=all
This commit is contained in:
parent
c06b1d84f1
commit
f6e554f288
|
@ -13,6 +13,8 @@ stdenv.mkDerivation rec {
|
|||
nativeBuildInputs = [ bison flex ];
|
||||
buildInputs = [ libsepol ];
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-fstack-protector-all";
|
||||
|
||||
# Don't build tests
|
||||
postPatch = ''
|
||||
sed -i '/-C test/d' Makefile
|
||||
|
|
|
@ -19,12 +19,12 @@ stdenv.mkDerivation rec {
|
|||
buildInputs = [ pkgconfig libsepol pcre ]
|
||||
++ optionals enablePython [ swig python ];
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-fstack-protector-all -std=gnu89";
|
||||
|
||||
postPatch = optionalString enablePython ''
|
||||
sed -i -e 's|\$(LIBDIR)/libsepol.a|${libsepol}/lib/libsepol.a|' src/Makefile
|
||||
'';
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-std=gnu89";
|
||||
|
||||
preBuild = ''
|
||||
# Build fails without this precreated
|
||||
mkdir -p $out/include
|
||||
|
|
|
@ -13,13 +13,13 @@ stdenv.mkDerivation rec {
|
|||
nativeBuildInputs = [ bison flex ];
|
||||
buildInputs = [ libsepol libselinux ustr bzip2 libaudit ];
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-fstack-protector-all -std=gnu89";
|
||||
|
||||
preBuild = ''
|
||||
makeFlagsArray+=("PREFIX=$out")
|
||||
makeFlagsArray+=("DESTDIR=$out")
|
||||
'';
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-fstack-protector-all -std=gnu89";
|
||||
|
||||
meta = libsepol.meta // {
|
||||
description = "Policy management tools for SELinux";
|
||||
license = stdenv.lib.licenses.lgpl21;
|
||||
|
|
|
@ -13,6 +13,8 @@ stdenv.mkDerivation rec {
|
|||
|
||||
nativeBuildInputs = [ flex ];
|
||||
|
||||
NIX_CFLAGS_COMPILE = "-fstack-protector-all";
|
||||
|
||||
preBuild = ''
|
||||
makeFlagsArray+=("PREFIX=$out")
|
||||
makeFlagsArray+=("DESTDIR=$out")
|
||||
|
|
Loading…
Reference in a new issue