glibc: allow to build position-independent static executable
This enables ALSR on static executables, which makes them harder to exploit by providing a crt suitable for static PIEs. Does this break existing binaries? Likely not. Static-pie is only used if explicitly enabled.
This commit is contained in:
parent
3ce66c03b3
commit
61c74e1aee
|
@ -153,6 +153,8 @@ stdenv.mkDerivation ({
|
|||
"--enable-add-ons"
|
||||
"--sysconfdir=/etc"
|
||||
"--enable-stackguard-randomization"
|
||||
"--enable-static-pie"
|
||||
"--enable-bind-now"
|
||||
(lib.withFeatureAs withLinuxHeaders "headers" "${linuxHeaders}/include")
|
||||
(lib.enableFeature profilingLibraries "profile")
|
||||
] ++ lib.optionals withLinuxHeaders [
|
||||
|
|
Loading…
Reference in a new issue