about summary refs log tree commit diff
path: root/pkgs/servers
diff options
context:
space:
mode:
authorLuke Granger-Brown <git@lukegb.com>2023-02-10 20:02:02 +0000
committerGitHub <noreply@github.com>2023-02-10 20:02:02 +0000
commitdc4cd5c7b89a07a51c5661ed605ded1a8b4886c8 (patch)
treed7f417ce1419614df3edabe0dd8ad87d2546c46a /pkgs/servers
parent33fee416a613be3b05df6f8932dd81cb92c6cfd0 (diff)
parent304c84ff106e11ca05db09e2207b9dcd9cad1e88 (diff)
Merge pull request #215501 from Trundle/envoy-noexecstack
envoy: build with noexecstack
Diffstat (limited to 'pkgs/servers')
-rw-r--r--pkgs/servers/http/envoy/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/servers/http/envoy/default.nix b/pkgs/servers/http/envoy/default.nix
index aed6a36be1d75..4a219a9cfb05a 100644
--- a/pkgs/servers/http/envoy/default.nix
+++ b/pkgs/servers/http/envoy/default.nix
@@ -149,6 +149,7 @@ buildBazelPackage rec {
     "--spawn_strategy=standalone"
     "--noexperimental_strict_action_env"
     "--cxxopt=-Wno-error"
+    "--linkopt=-Wl,-z,noexecstack"
 
     # Force use of system Java.
     "--extra_toolchains=@local_jdk//:all"