about summary refs log tree commit diff
path: root/pkgs/servers/http
diff options
context:
space:
mode:
authorAndreas Stührk <andy@yaxi.tech>2023-02-09 11:41:09 +0100
committerAndreas Stührk <andy@hammerhartes.de>2023-02-09 12:07:03 +0100
commit304c84ff106e11ca05db09e2207b9dcd9cad1e88 (patch)
tree0b92855a37219ca866ad30652af8d1c011c14a61 /pkgs/servers/http
parent6ccc4a59c3f1b56d039d93da52696633e641bc71 (diff)
envoy: build with noexecstack
Diffstat (limited to 'pkgs/servers/http')
-rw-r--r--pkgs/servers/http/envoy/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/servers/http/envoy/default.nix b/pkgs/servers/http/envoy/default.nix
index aed6a36be1d75..4a219a9cfb05a 100644
--- a/pkgs/servers/http/envoy/default.nix
+++ b/pkgs/servers/http/envoy/default.nix
@@ -149,6 +149,7 @@ buildBazelPackage rec {
     "--spawn_strategy=standalone"
     "--noexperimental_strict_action_env"
     "--cxxopt=-Wno-error"
+    "--linkopt=-Wl,-z,noexecstack"
 
     # Force use of system Java.
     "--extra_toolchains=@local_jdk//:all"