pyrox.dev
lol
hardened-config: build with fortify source
+5
+5
pkgs/os-specific/linux/kernel/hardened-config.nix
+5
pkgs/os-specific/linux/kernel/hardened-config.nix
···
106
106
# Use -fstack-protector-strong (gcc 4.9+) for best stack canary coverage.
107
107
CC_STACKPROTECTOR_REGULAR n
108
108
CC_STACKPROTECTOR_STRONG y
109
+
110
+
# Enable compile/run-time buffer overflow detection ala glibc's _FORTIFY_SOURCE
111
+
${optionalString (versionAtLeast version "4.13") ''
112
+
FORTIFY_SOURCE y
113
+
''}
109
114
''