summary refs log tree commit diff
diff options
context:
space:
mode:
authorRobin Gloster <mail@glob.in>2016-02-26 16:38:26 +0000
committerRobin Gloster <mail@glob.in>2016-02-26 16:38:26 +0000
commit310fa567881422cc8c95bb977c8f6b70e1e06304 (patch)
tree01d45085e79e68377b9ced95c687bd3ded1ed024
parentb6279950bdec2614454bf41ec6ab999ad9b1a0ed (diff)
downloadnixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar.gz
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar.bz2
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar.lz
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar.xz
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.tar.zst
nixpkgs-310fa567881422cc8c95bb977c8f6b70e1e06304.zip
nginx: enable pie hardening
-rw-r--r--pkgs/servers/http/nginx/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/servers/http/nginx/default.nix b/pkgs/servers/http/nginx/default.nix
index 6944a89477a..3dbb34f9b02 100644
--- a/pkgs/servers/http/nginx/default.nix
+++ b/pkgs/servers/http/nginx/default.nix
@@ -55,6 +55,8 @@ stdenv.mkDerivation rec {
 
   preConfigure = concatMapStringsSep "\n" (mod: mod.preConfigure or "") modules;
 
+  hardening_pie = true;
+
   meta = {
     description = "A reverse proxy and lightweight webserver";
     homepage    = http://nginx.org;