nixpkgs/pkgs
Ruud van Asseldonk 8b6a9202e7 libressl: build libcrypto with noexecstack
For some reasons, libcrypto would be built with the executable stack
flag set. I found out about this when Nginx failed to load the shared
library, because I was running it with MemoryDenyWriteExecute=true,
which does not permit executable stacks.

I am not sure why the stack ends up executable; the other shared
libraries which are part of LibreSSL do not have this flag set. You can
verify this with 'execstack -q'. Non-executable stacks should be the
default, and from checking some other files, that does appear to be the
case. The LibreSSL sources do not contain the string "execstack", so
I am not sure what causes the default to be overridden.

Adding '-z noexecstack' to the linker flags makes the linker unset the
flag. Now my Nginx can load the library, and so far I have not run into
other issues.
2019-08-10 22:21:57 +02:00
..
applications Merge pull request #60796 from r-ryantm/auto-update/standardnotes 2019-08-10 12:01:05 -04:00
build-support Merge pull request #64852 from marsam/update-apache-mirrors 2019-08-09 04:24:28 -05:00
common-updater
data
desktops Merge pull request #66236 from worldofpeace/test-reorganize 2019-08-10 11:23:57 -04:00
development libressl: build libcrypto with noexecstack 2019-08-10 22:21:57 +02:00
games steam chrootenv: add lsb-release 2019-08-09 12:29:58 +03:00
misc adwaita-qt: 1.0 -> 1.1.0 2019-08-05 12:26:27 -04:00
os-specific nixos/beegfs: mark as broken (#66352) 2019-08-10 18:59:51 +02:00
servers Merge pull request #64781 from r-ryantm/auto-update/clickhouse 2019-08-10 11:47:33 +02:00
shells Merge pull request #65126 from r-ryantm/auto-update/powershell 2019-08-10 10:03:53 +02:00
stdenv
test
tools Merge pull request #62348 from r-ryantm/auto-update/argyllcms 2019-08-10 19:28:56 +02:00
top-level Merge pull request #52588 from marsam/init-fffuu 2019-08-10 09:52:31 -05:00