diff options
| author | Robin Gloster <mail@glob.in> | 2016-02-26 17:54:46 +0000 |
|---|---|---|
| committer | Robin Gloster <mail@glob.in> | 2016-02-26 17:54:46 +0000 |
| commit | 62f65d15ca1ffaee1675a94d174259f4eca853b8 (patch) | |
| tree | bbce7b3f5167f41036349c9afd7716a54518ab61 /pkgs/tools/networking/chrony | |
| parent | 87e64f153b792d0b07f1d6a0cd0e8b5dd0c21424 (diff) | |
chrony: enable pie hardening
Diffstat (limited to 'pkgs/tools/networking/chrony')
| -rw-r--r-- | pkgs/tools/networking/chrony/default.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/tools/networking/chrony/default.nix b/pkgs/tools/networking/chrony/default.nix index dca92c565af97..57981fdaa669c 100644 --- a/pkgs/tools/networking/chrony/default.nix +++ b/pkgs/tools/networking/chrony/default.nix @@ -15,6 +15,8 @@ stdenv.mkDerivation rec { buildInputs = [ readline texinfo nss nspr ] ++ stdenv.lib.optional stdenv.isLinux libcap; nativeBuildInputs = [ pkgconfig ]; + hardening_pie = true; + configureFlags = [ "--chronyvardir=$(out)/var/lib/chrony" ]; |