summaryrefslogtreecommitdiffstats
path: root/pkgs/applications/networking/ids
diff options
context:
space:
mode:
authorVladimír Čunát <v@cunat.cz>2024-07-06 08:16:11 +0200
committerVladimír Čunát <v@cunat.cz>2024-07-06 08:18:34 +0200
commit8145bb89f7848432d6c7b6bfc17c03a284f2eae6 (patch)
tree6c2ce198cae67d535a42405aad8c34f00e10d68e /pkgs/applications/networking/ids
parent5a601bc241d76bd67f71d00dcb3e03c79731fddf (diff)
suricata: fixup build by not enabling a new hardening
https://hydra.nixos.org/build/264602487/nixlog/4/tail /cc PR introducing it: #316761
Diffstat (limited to 'pkgs/applications/networking/ids')
-rw-r--r--pkgs/applications/networking/ids/suricata/default.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/pkgs/applications/networking/ids/suricata/default.nix b/pkgs/applications/networking/ids/suricata/default.nix
index 1d1fd579ab73..63a13a26923c 100644
--- a/pkgs/applications/networking/ids/suricata/default.nix
+++ b/pkgs/applications/networking/ids/suricata/default.nix
@@ -125,7 +125,8 @@ stdenv.mkDerivation rec {
sed -i 's|${builtins.storeDir}/\(.\{8\}\)[^-]*-|${builtins.storeDir}/\1...-|g' ./src/build-info.h
'';
- hardeningDisable = [ "stackprotector" ];
+ # zerocallusedregs interferes during BPF compilation; TODO: perhaps improve
+ hardeningDisable = [ "stackprotector" "zerocallusedregs" ];
installFlags = [
"e_datadir=\${TMPDIR}"