bintools-wrapper: enable stackclashprotection by default

NixOS · Jan 11, 2025 · 04791f4 · 04791f4
1 parent 33e2500
commit 04791f4
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/pkgs/build-support/bintools-wrapper/default.nix b/pkgs/build-support/bintools-wrapper/default.nix
@@ -43,6 +43,7 @@
     "fortify3"
     "pic"
     "relro"
+    "stackclashprotection"
     "stackprotector"
     "strictoverflow"
     "zerocallusedregs"

diff --git a/pkgs/top-level/stage.nix b/pkgs/top-level/stage.nix
@@ -329,7 +329,6 @@ let
             super'.stdenv.cc.defaultHardeningFlags ++ [
               "shadowstack"
               "pacret"
-              "stackclashprotection"
               "trivialautovarinit"
             ]
           ) super'.stdenv;