openssh: enable pie hardening

2016-02-26 16:30:26 +00:00
parent c045d2de37
commit b6279950bd
1 changed files with 2 additions and 0 deletions
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -71,6 +71,8 @@ stdenv.mkDerivation rec {

  enableParallelBuilding = true;

+  hardening_pie = true;
+
  postInstall = ''
    # Install ssh-copy-id, it's very useful.
    cp contrib/ssh-copy-id $out/bin/