[buoh/cleanups: 6/11] Nix: Dusable hardening



commit 721f857b98ca56bfbbaa911fdaf5c5f945330f22
Author: Jan Tojnar <jtojnar gmail com>
Date:   Fri Sep 14 18:39:05 2018 +0200

    Nix: Dusable hardening
    
    Hardening does not work in debug mode, whih is default in the shell.

 default.nix | 3 +++
 1 file changed, 3 insertions(+)
---
diff --git a/default.nix b/default.nix
index 35b7cdf..2f61ef6 100644
--- a/default.nix
+++ b/default.nix
@@ -63,5 +63,8 @@ stdenv.mkDerivation rec {
       meson test --print-errorlogs
   '';
 
+  # Hardening does not work in debug mode
+  hardeningDisable = optionals shell [ "all" ];
+
   inherit doCheck;
 }


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]