tjh.dev
1{ fetchurl, lib, stdenv, elf-header }:
2
3stdenv.mkDerivation rec {
4 pname = "paxctl";
5 version = "0.9";
6
7 src = fetchurl {
8 url = "https://pax.grsecurity.net/${pname}-${version}.tar.gz";
9 sha256 = "0biw882fp1lmgs6kpxznp1v6758r7dg9x8iv5a06k0b82bcdsc53";
10 };
11
12 buildInputs = [ elf-header ];
13
14 preBuild = ''
15 sed -i Makefile \
16 -e 's|--owner 0 --group 0||g' \
17 -e '/CC:=gcc/d'
18 '';
19
20 makeFlags = [
21 "DESTDIR=$(out)"
22 "MANDIR=share/man/man1"
23 ];
24
25 setupHook = ./setup-hook.sh;
26
27 meta = with lib; {
28 description = "Tool for controlling PaX flags on a per binary basis";
29 mainProgram = "paxctl";
30 homepage = "https://pax.grsecurity.net";
31 license = licenses.gpl2Only;
32 platforms = platforms.all;
33 maintainers = with maintainers; [ thoughtpolice ];
34 };
35}