nixpkgs/pkgs/tools/networking/openfortivpn/default.nix
Franz Pletz aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00

36 lines
858 B
Nix

{ stdenv, fetchFromGitHub, autoreconfHook, openssl, ppp }:
with stdenv.lib;
let repo = "openfortivpn";
version = "1.0.1";
in stdenv.mkDerivation {
name = "${repo}-${version}";
src = fetchFromGitHub {
owner = "adrienverge";
inherit repo;
rev = "v${version}";
sha256 = "0kwl8hv3nydd34xp1489jpjdj4bmknfl9xrgynij0vf5qx29xv7m";
};
buildInputs = [ openssl ppp autoreconfHook ];
hardeningDisable = [ "format" ];
preConfigure = ''
substituteInPlace src/tunnel.c --replace "/usr/sbin/pppd" "${ppp}/bin/pppd"
'';
enableParallelBuilding = true;
meta = {
description = "Client for PPP+SSL VPN tunnel services";
homepage = https://github.com/adrienverge/openfortivpn;
license = stdenv.lib.licenses.gpl3;
maintainers = [ stdenv.lib.maintainers.madjar ];
platforms = stdenv.lib.platforms.linux;
};
}