diff --git a/pkgs/servers/dns/bind/default.nix b/pkgs/servers/dns/bind/default.nix
index 10dc572adcc..5890f9a53b6 100644
--- a/pkgs/servers/dns/bind/default.nix
+++ b/pkgs/servers/dns/bind/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation rec {
     moveToOutput bin/bind9-config $dev
     moveToOutput bin/isc-config.sh $dev
 
-    for f in $out/lib/*.la; do
+    for f in "$out/lib/"*.la; do
       sed -i $f -e 's|-L${openssl.dev}|-L${openssl.out}|g'
     done
   '';