pyrox.dev
tboot: disable stackprotector/pic hardening
+4
pkgs/tools/security/tboot/default.nix
+4
pkgs/tools/security/tboot/default.nix
···
12
13
patches = [ ./tboot-add-well-known-secret-option-to-lcp_writepol.patch ];
14
15
configurePhase = ''
16
for a in lcptools utils tb_polgen; do
17
substituteInPlace $a/Makefile --replace /usr/sbin /sbin
18
done
19
substituteInPlace docs/Makefile --replace /usr/share /share
20
'';
21
installFlags = "DESTDIR=$(out)";
22
23
meta = with stdenv.lib; {
···
12
13
patches = [ ./tboot-add-well-known-secret-option-to-lcp_writepol.patch ];
14
15
+
hardening_pic = false;
16
+
hardening_stackprotector = false;
17
+
18
configurePhase = ''
19
for a in lcptools utils tb_polgen; do
20
substituteInPlace $a/Makefile --replace /usr/sbin /sbin
21
done
22
substituteInPlace docs/Makefile --replace /usr/share /share
23
'';
24
+
25
installFlags = "DESTDIR=$(out)";
26
27
meta = with stdenv.lib; {