aff1f4ab94
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
51 lines
1.9 KiB
Nix
51 lines
1.9 KiB
Nix
{ stdenv, fetchurl, gettext, coreutils }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "sharutils-4.11.1";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://gnu/sharutils/${name}.tar.bz2";
|
|
sha256 = "1mallg1gprimlggdisfzdmh1xi676jsfdlfyvanlcw72ny8fsj3g";
|
|
};
|
|
|
|
hardeningDisable = [ "format" ];
|
|
|
|
preConfigure = ''
|
|
# Fix for building on Glibc 2.16. Won't be needed once the
|
|
# gnulib in sharutils is updated.
|
|
sed -i ${stdenv.lib.optionalString (stdenv.isOpenBSD && stdenv.cc.nativeTools) "''"} '/gets is a security hole/d' lib/stdio.in.h
|
|
'';
|
|
|
|
# GNU Gettext is needed on non-GNU platforms.
|
|
buildInputs = [ gettext coreutils ];
|
|
|
|
doCheck = true;
|
|
|
|
crossAttrs = {
|
|
patches = [ ./sharutils-4.11.1-cross-binary-mode-popen.patch ];
|
|
};
|
|
|
|
meta = {
|
|
description = "Tools for remote synchronization and `shell archives'";
|
|
longDescription =
|
|
'' GNU shar makes so-called shell archives out of many files, preparing
|
|
them for transmission by electronic mail services. A shell archive
|
|
is a collection of files that can be unpacked by /bin/sh. A wide
|
|
range of features provide extensive flexibility in manufacturing
|
|
shars and in specifying shar smartness. For example, shar may
|
|
compress files, uuencode binary files, split long files and
|
|
construct multi-part mailings, ensure correct unsharing order, and
|
|
provide simplistic checksums.
|
|
|
|
GNU unshar scans a set of mail messages looking for the start of
|
|
shell archives. It will automatically strip off the mail headers
|
|
and other introductory text. The archive bodies are then unpacked
|
|
by a copy of the shell. unshar may also process files containing
|
|
concatenated shell archives.
|
|
'';
|
|
homepage = http://www.gnu.org/software/sharutils/;
|
|
license = stdenv.lib.licenses.gpl3Plus;
|
|
maintainers = [ ];
|
|
platforms = stdenv.lib.platforms.all;
|
|
};
|
|
}
|