pyrox.dev
linuxPackages_4_14_hardened: fix eval
Not sure if this is the right thing to do, but apparently we want this
setting for <4.18, so we hard-code it for 4.14 via `mkForce` (previously
this has led to conflicting definitions which is why the hardened 4.14
kernel never seems to have evaluated properly).
+1
-1
pkgs/os-specific/linux/kernel/hardened/config.nix
+1
-1
pkgs/os-specific/linux/kernel/hardened/config.nix
···
88
88
INET_MPTCP_DIAG = option no;
89
89
90
90
# Use -fstack-protector-strong (gcc 4.9+) for best stack canary coverage.
91
-
CC_STACKPROTECTOR_REGULAR = whenOlder "4.18" no;
91
+
CC_STACKPROTECTOR_REGULAR = lib.mkForce (whenOlder "4.18" no);
92
92
CC_STACKPROTECTOR_STRONG = whenOlder "4.18" yes;
93
93
94
94
# Detect out-of-bound reads/writes and use-after-free