diff --git a/pkgs/tools/security/p0f/default.nix b/pkgs/tools/security/p0f/default.nix
index 0b6a9644424..11e1f14baf9 100644
--- a/pkgs/tools/security/p0f/default.nix
+++ b/pkgs/tools/security/p0f/default.nix
@@ -29,6 +29,8 @@ stdenv.mkDerivation rec {
     cp ./tools/p0f-sendsyn6 $out/sbin
   '';
 
+  hardeningDisable = [ "format" ];
+
   meta = {
     description = "Passive network reconnaissance and fingerprinting tool";
     homepage    = "http://lcamtuf.coredump.cx/p0f3/";