chrony: enable pie hardening
This commit is contained in:
@@ -15,6 +15,8 @@ stdenv.mkDerivation rec {
|
|||||||
buildInputs = [ readline texinfo nss nspr ] ++ stdenv.lib.optional stdenv.isLinux libcap;
|
buildInputs = [ readline texinfo nss nspr ] ++ stdenv.lib.optional stdenv.isLinux libcap;
|
||||||
nativeBuildInputs = [ pkgconfig ];
|
nativeBuildInputs = [ pkgconfig ];
|
||||||
|
|
||||||
|
hardening_pie = true;
|
||||||
|
|
||||||
configureFlags = [
|
configureFlags = [
|
||||||
"--chronyvardir=$(out)/var/lib/chrony"
|
"--chronyvardir=$(out)/var/lib/chrony"
|
||||||
];
|
];
|
||||||
|
|||||||
Reference in New Issue
Block a user