about summary refs log tree commit diff
path: root/pkgs/os-specific/linux/wireguard
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-09-03 14:42:08 +0200
committerJoachim Fasting <joachifm@fastmail.fm>2016-09-03 14:50:07 +0200
commitca465eeeb1f724673a2d436a58e73f4283a89404 (patch)
tree99bddd08a74ba9ab25e4fa6af576f3fb0c7f2c13 /pkgs/os-specific/linux/wireguard
parentfc0b40328d4b1b284d9e00ba222687626d93cbef (diff)
downloadnixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar.gz
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar.bz2
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar.lz
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar.xz
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.tar.zst
nixlib-ca465eeeb1f724673a2d436a58e73f4283a89404.zip
wireguard: disable build against -grsec kernels
Looks to be incompatible with the PaX constification plugin:

> /tmp/nix-build-wireguard-unstable-2016-08-08.drv-0/WireGuard-experimental-0.0.20160808/src/device.c:329:29: error: constified variable 'link_ops' placed into writable section ".data..read_mostly"
 static struct rtnl_link_ops link_ops __read_mostly = {

https://hydra.nixos.org/build/39671573/log/raw

See also https://github.com/NixOS/nixpkgs/issues/18209
Diffstat (limited to 'pkgs/os-specific/linux/wireguard')
-rw-r--r--pkgs/os-specific/linux/wireguard/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/wireguard/default.nix b/pkgs/os-specific/linux/wireguard/default.nix
index 3264194f1256..a885d40658b9 100644
--- a/pkgs/os-specific/linux/wireguard/default.nix
+++ b/pkgs/os-specific/linux/wireguard/default.nix
@@ -2,6 +2,8 @@
 
 # module requires Linux >= 4.1 https://www.wireguard.io/install/#kernel-requirements
 assert kernel != null -> stdenv.lib.versionAtLeast kernel.version "4.1";
+# module is incompatible with the PaX constification plugin
+assert kernel != null -> !(kernel.features.grsecurity or false);
 
 let
   name = "wireguard-unstable-${version}";