summary refs log tree commit diff
path: root/pkgs/tools/networking/openssh
diff options
context:
space:
mode:
authorRobin Gloster <mail@glob.in>2016-02-26 16:30:26 +0000
committerRobin Gloster <mail@glob.in>2016-02-26 16:30:26 +0000
commitb6279950bdec2614454bf41ec6ab999ad9b1a0ed (patch)
tree38f76f6f6696d585a7b906cbddcfe5dcd71b4b03 /pkgs/tools/networking/openssh
parentc045d2de37261fcfb1d83f427b364684e715e842 (diff)
downloadnixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar.gz
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar.bz2
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar.lz
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar.xz
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.tar.zst
nixlib-b6279950bdec2614454bf41ec6ab999ad9b1a0ed.zip
openssh: enable pie hardening
Diffstat (limited to 'pkgs/tools/networking/openssh')
-rw-r--r--pkgs/tools/networking/openssh/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix
index a6aed5169c8b..67c0f3ec89ee 100644
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -71,6 +71,8 @@ stdenv.mkDerivation rec {
 
   enableParallelBuilding = true;
 
+  hardening_pie = true;
+
   postInstall = ''
     # Install ssh-copy-id, it's very useful.
     cp contrib/ssh-copy-id $out/bin/