libgcrypt: force noexecstack

2020-12-26 11:27:37 +01:00 · 2020-12-26 11:27:37 +01:00 · 97a279c71d
commit 97a279c71d
parent 6274a5bbb3
1 changed files with 5 additions and 0 deletions
--- a/pkgs/development/libraries/libgcrypt/default.nix
+++ b/pkgs/development/libraries/libgcrypt/default.nix
@ -34,6 +34,11 @@ stdenv.mkDerivation rec {
  # aarch64
  configurePlatforms = [ "host" "build" ];

+  postConfigure = ''
+    sed -i configure \
+        -e 's/NOEXECSTACK_FLAGS=$/NOEXECSTACK_FLAGS="-Wa,--noexecstack"/'
+  '';
+
  # Make sure libraries are correct for .pc and .la files
  # Also make sure includes are fixed for callers who don't use libgpgcrypt-config
  postFixup = ''