Unverified Commit b6876d5c authored by Ben Wolsieffer's avatar Ben Wolsieffer Committed by GitHub
Browse files

nixos/security/wrappers: don't force PIE hardening (#259509) 

PIE causes problems with static binaries on ARM (see 76552e95). It is
enabled by default on other platforms anyway when musl is used, so we
don't need to specify it manually.
parent 21de4a64

nixos/modules/security/wrappers/wrapper.nix

+0 −1
Original line number Diff line number Diff line
@@ -5,7 +5,6 @@ stdenv.mkDerivation { 
  name = "security-wrapper";

  buildInputs = [ linuxHeaders ];

  dontUnpack = true;

  hardeningEnable = [ "pie" ];

  CFLAGS = [

    ''-DSOURCE_PROG="${sourceProg}"''

  ] ++ (if debug then [