php: enable PIE hardening

2016-03-06 00:15:18 +01:00 · 2016-03-06 00:15:18 +01:00 · fb57bfbd4f
commit fb57bfbd4f
parent 05a02c53a0
1 changed files with 2 additions and 0 deletions
--- a/pkgs/development/interpreters/php/default.nix
+++ b/pkgs/development/interpreters/php/default.nix
@ -249,6 +249,8 @@ let
        calendarSupport = config.php.calendar or true;
      };

+      hardeningEnable = [ "pie" ];
+
      configurePhase = ''
        # Don't record the configure flags since this causes unnecessary
        # runtime dependencies.