chrony: enable pie hardening

2016-02-26 17:54:46 +00:00 · 2016-02-26 17:54:46 +00:00 · 62f65d15ca
commit 62f65d15ca
parent 87e64f153b
1 changed files with 2 additions and 0 deletions
--- a/pkgs/tools/networking/chrony/default.nix
+++ b/pkgs/tools/networking/chrony/default.nix
@ -15,6 +15,8 @@ stdenv.mkDerivation rec {
  buildInputs = [ readline texinfo nss nspr ] ++ stdenv.lib.optional stdenv.isLinux libcap;
  nativeBuildInputs = [ pkgconfig ];

+  hardening_pie = true;
+
  configureFlags = [
    "--chronyvardir=$(out)/var/lib/chrony"
  ];