glibc: unconditionally disable pie

glibc already has to be careful not to create extra dynamic relocations
in ld.so. For that it enables -fPIC/-fPIE selectively.
main
Sergei Trofimovich 2 years ago
parent bc23b05712
commit bf990cc3cc
  1. 11
      pkgs/development/libraries/glibc/default.nix

@ -40,13 +40,10 @@ callPackage ./common.nix { inherit stdenv; } {
makeFlagsArray+=("bindir=$bin/bin" "sbindir=$bin/sbin" "rootsbindir=$bin/sbin")
'';
# The stackprotector and fortify hardening flags are autodetected by glibc
# and enabled by default if supported. Setting it for every gcc invocation
# does not work.
hardeningDisable = [ "stackprotector" "fortify" ]
# XXX: Not actually musl-speciic but since only musl enables pie by default,
# limit rebuilds by only disabling pie w/musl
++ lib.optional stdenv.hostPlatform.isMusl "pie";
# The pie, stackprotector and fortify hardening flags are autodetected by
# glibc and enabled by default if supported. Setting it for every gcc
# invocation does not work.
hardeningDisable = [ "fortify" "pie" "stackprotector" ];
NIX_CFLAGS_COMPILE = lib.concatStringsSep " "
(builtins.concatLists [

Loading…
Cancel
Save