diff --git a/pkgs/tools/security/gnupg/1compat.nix b/pkgs/tools/security/gnupg/1compat.nix
index 9bd71467f0e..d875413cc79 100644
--- a/pkgs/tools/security/gnupg/1compat.nix
+++ b/pkgs/tools/security/gnupg/1compat.nix
@@ -6,12 +6,12 @@ stdenv.mkDerivation {
   builder = writeScript "gnupg1compat-builder" ''
     # First symlink all top-level dirs
     ${coreutils}/bin/mkdir -p $out
-    ${coreutils}/bin/ln -s ${gnupg}/* $out
+    ${coreutils}/bin/ln -s "${gnupg}/"* $out
 
     # Replace bin with directory and symlink it contents
     ${coreutils}/bin/rm $out/bin
     ${coreutils}/bin/mkdir -p $out/bin
-    ${coreutils}/bin/ln -s ${gnupg}/bin/* $out/bin
+    ${coreutils}/bin/ln -s "${gnupg}/bin/"* $out/bin
 
     # Add gpg->gpg2 and gpgv->gpgv2 symlinks
     ${coreutils}/bin/ln -s gpg2 $out/bin/gpg