diff options
author | Robin Gloster <mail@glob.in> | 2016-02-26 17:54:46 +0000 |
---|---|---|
committer | Robin Gloster <mail@glob.in> | 2016-02-26 17:54:46 +0000 |
commit | 62f65d15ca1ffaee1675a94d174259f4eca853b8 (patch) | |
tree | bbce7b3f5167f41036349c9afd7716a54518ab61 /pkgs/tools/networking/chrony | |
parent | 87e64f153b792d0b07f1d6a0cd0e8b5dd0c21424 (diff) | |
download | nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar.gz nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar.bz2 nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar.lz nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar.xz nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.tar.zst nixlib-62f65d15ca1ffaee1675a94d174259f4eca853b8.zip |
chrony: enable pie hardening
Diffstat (limited to 'pkgs/tools/networking/chrony')
-rw-r--r-- | pkgs/tools/networking/chrony/default.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/tools/networking/chrony/default.nix b/pkgs/tools/networking/chrony/default.nix index dca92c565af9..57981fdaa669 100644 --- a/pkgs/tools/networking/chrony/default.nix +++ b/pkgs/tools/networking/chrony/default.nix @@ -15,6 +15,8 @@ stdenv.mkDerivation rec { buildInputs = [ readline texinfo nss nspr ] ++ stdenv.lib.optional stdenv.isLinux libcap; nativeBuildInputs = [ pkgconfig ]; + hardening_pie = true; + configureFlags = [ "--chronyvardir=$(out)/var/lib/chrony" ]; |