36 lines
702 B
Nix
36 lines
702 B
Nix
|
{
|
||
|
|
stdenv,
|
||
|
|
unsecvars,
|
||
|
|
linuxHeaders,
|
||
|
|
sourceProg,
|
||
|
|
debug ? false,
|
||
|
|
}:
|
||
|
|
# For testing:
|
||
|
|
# $ nix-build -E 'with import <nixpkgs> {}; pkgs.callPackage ./wrapper.nix { sourceProg = "${pkgs.hello}/bin/hello"; debug = true; }'
|
||
|
|
stdenv.mkDerivation {
|
||
|
|
name = "security-wrapper-${baseNameOf sourceProg}";
|
||
|
|
buildInputs = [ linuxHeaders ];
|
||
|
|
dontUnpack = true;
|
||
|
|
CFLAGS = [
|
||
|
|
''-DSOURCE_PROG="${sourceProg}"''
|
||
|
|
]
|
||
|
|
++ (
|
||
|
|
if debug then
|
||
|
|
[
|
||
|
|
"-Werror"
|
||
|
|
"-Og"
|
||
|
|
"-g"
|
||
|
|
]
|
||
|
|
else
|
||
|
|
[
|
||
|
|
"-Wall"
|
||
|
|
"-O2"
|
||
|
|
]
|
||
|
|
);
|
||
|
|
dontStrip = debug;
|
||
|
|
installPhase = ''
|
||
|
|
mkdir -p $out/bin
|
||
|
|
$CC $CFLAGS ${./wrapper.c} -I${unsecvars} -o $out/bin/security-wrapper
|
||
|
|
'';
|
||
|
|
}
|