bintools-wrapper: enable stackclashprotection hardening flag by default (#374893)

2026-01-12 02:40:31 +08:00 · 2025-02-08 18:16:17 +01:00
parent d15ca73b55 04791f4a4d
commit 3ebfc6ddcf
2 changed files with 1 additions and 1 deletions
--- a/pkgs/build-support/bintools-wrapper/default.nix
+++ b/pkgs/build-support/bintools-wrapper/default.nix
@@ -43,6 +43,7 @@
    "fortify3"
    "pic"
    "relro"
+    "stackclashprotection"
    "stackprotector"
    "strictoverflow"
    "zerocallusedregs"
--- a/pkgs/top-level/stage.nix
+++ b/pkgs/top-level/stage.nix
@@ -346,7 +346,6 @@ let
            super'.stdenv.cc.defaultHardeningFlags ++ [
              "shadowstack"
              "pacret"
-              "stackclashprotection"
              "trivialautovarinit"
            ]
          ) super'.stdenv;