about summary refs log tree commit diff
path: root/pkgs/os-specific/linux/checkpolicy
diff options
context:
space:
mode:
authorWilliam A. Kennington III <william@wkennington.com>2015-07-31 13:02:41 -0700
committerWilliam A. Kennington III <william@wkennington.com>2015-07-31 17:11:11 -0700
commitf6e554f28871306a0235cd9be7397cfd587a83f1 (patch)
tree36896ffee5a25a5d9ee74869180b51675b6abd8f /pkgs/os-specific/linux/checkpolicy
parentc06b1d84f137a6c35c22110ebf4c1e7426024756 (diff)
downloadnixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar.gz
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar.bz2
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar.lz
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar.xz
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.tar.zst
nixlib-f6e554f28871306a0235cd9be7397cfd587a83f1.zip
selinux: Use fstack-protector=all
Diffstat (limited to 'pkgs/os-specific/linux/checkpolicy')
-rw-r--r--pkgs/os-specific/linux/checkpolicy/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/checkpolicy/default.nix b/pkgs/os-specific/linux/checkpolicy/default.nix
index d4ae82528f18..9fbed50f3b9a 100644
--- a/pkgs/os-specific/linux/checkpolicy/default.nix
+++ b/pkgs/os-specific/linux/checkpolicy/default.nix
@@ -13,6 +13,8 @@ stdenv.mkDerivation rec {
   nativeBuildInputs = [ bison flex ];
   buildInputs = [ libsepol ];
 
+  NIX_CFLAGS_COMPILE = "-fstack-protector-all";
+
   # Don't build tests
   postPatch = ''
     sed -i '/-C test/d' Makefile