diff --git a/pkgs/build-support/cc-wrapper/add-hardening b/pkgs/build-support/cc-wrapper/add-hardening
index 92e10db3ea48..966d68e1948e 100644
--- a/pkgs/build-support/cc-wrapper/add-hardening
+++ b/pkgs/build-support/cc-wrapper/add-hardening
@@ -12,7 +12,7 @@ if [[ ! $hardeningDisable == "all" ]]; then
           hardeningCFlags+=('-O2' '-D_FORTIFY_SOURCE=2')
           ;;
         stackprotector)
-          hardeningCFlags+=('-fstack-protector-strong')
+          hardeningCFlags+=('-fstack-protector-strong' '--param ssp-buffer-size=4')
           ;;
         pie)
           hardeningCFlags+=('-fPIE')