bsc: disable hardening in some packages

bsc/babeltrace2/default.nix

@@ -24,6 +24,7 @@ stdenv.mkDerivation rec {
   enableParallelBuilding = true;
   nativeBuildInputs = [ pkgconfig ];
   buildInputs = [ glib libuuid popt elfutils python3 swig4 ncurses breakpointHook ];
+  hardeningDisable = [ "all" ];
 
   configureFlags = [
     "--enable-python-plugins"

bsc/extrae/default.nix

@@ -34,6 +34,7 @@ stdenv.mkDerivation rec {
   patches = [ ./use-command.patch ];
 
   enableParallelBuilding = true;
+  hardeningDisable = [ "all" ];
 
   nativeBuildInputs = [ installShellFiles ];
 

bsc/llvm-ompss2/clang.nix

@@ -49,7 +49,9 @@ stdenv.mkDerivation rec {
   # Error with -D_FORTIFY_SOURCE=2, see https://bugs.gentoo.org/636604:
   # /build/source/compiler-rt/lib/tsan/dd/dd_interceptors.cpp:225:20:
   # error: redefinition of 'realpath'
-  hardeningDisable = [ "fortify" ];
+  # Requires disabling the "fortify" set of flags, however, for performance we
+  # disable all:
+  hardeningDisable = [ "all" ];
 
   cmakeBuildType = if enableDebug then "Debug" else "Release";
 

bsc/lmbench/default.nix

@@ -23,7 +23,7 @@ stdenv.mkDerivation rec {
     sed -i "s@/bin/rm@rm@g" $(find . -name Makefile)
   '';
 
-  hardeningDisable = [ "format" ];
+  hardeningDisable = [ "all" ];
 
   enableParallelBuilding = false;
 

bsc/mpich/default.nix

@@ -31,6 +31,7 @@ stdenv.mkDerivation  rec {
   enableParallelBuilding = true;
 
   buildInputs = [ perl gfortran openssh hwloc libfabric ];
+  hardeningDisable = [ "all" ];
 
   # doCheck = true; # Fails
 

bsc/openmpi/default.nix

@@ -76,6 +76,8 @@ in stdenv.mkDerivation rec {
 
   enableParallelBuilding = true;
 
+  hardeningDisable = [ "all" ];
+
   postInstall = ''
     rm -f $out/lib/*.la
    '';

bsc/osu/default.nix

@@ -16,6 +16,7 @@ stdenv.mkDerivation rec {
   doCheck = true;
   enableParallelBuilding = true;
   buildInputs = [ mpi ];
+  hardeningDisable = [ "all" ];
   configureFlags = [ 
       "CC=${mpi}/bin/mpicc"
       "CXX=${mpi}/bin/mpicxx"

bsc/tampi/default.nix

@@ -24,4 +24,6 @@ stdenv.mkDerivation rec {
     rev = "6b11368ea522cd7095cfcf163831b8285faeee7e";
     sha256 = "0519lb1rinhzkk0iy5cjjiqnk1bzhnnzhfigj9ac2c3wl0zcsrvy";
   };
+
+  hardeningDisable = [ "all" ];
 }

bsc/tampi/git.nix

@@ -22,4 +22,5 @@ stdenv.mkDerivation rec {
     url = "ssh://git@bscpm03.bsc.es/interoperability/tampi";
     ref = "master";
   };
+  hardeningDisable = [ "all" ];
 }

overlay.nix

@@ -93,6 +93,8 @@ let
         "--with-jemalloc-prefix=nanos6_je_"
         "--enable-stats"
       ];
+
+      hardeningDisable = [ "all" ];
     });
 
     # =================================================================