diff options
| author | Andrey Arapov <arno@nixaid.com> | 2015-04-05 19:26:13 +0200 |
|---|---|---|
| committer | Andrey Arapov <arno@nixaid.com> | 2015-04-05 19:26:13 +0200 |
| commit | 0449962869a473d546da9aee34d0c10da34308fe (patch) | |
| tree | 3dddca1d8adb9d1006f0d14c72be21933b9f1e3b /pkgs/servers/mail/postfix/default.nix | |
| parent | 8300898f98e235dcfa321887d52b7f72f80b5ad5 (diff) | |
| download | nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar.gz nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar.bz2 nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar.lz nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar.xz nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.tar.zst nixpkgs-0449962869a473d546da9aee34d0c10da34308fe.zip | |
postfix28 and postfix211: hardening with Canary, PIE, Full RELRO and FORTIFY_SOURCE
Diffstat (limited to 'pkgs/servers/mail/postfix/default.nix')
| -rw-r--r-- | pkgs/servers/mail/postfix/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/servers/mail/postfix/default.nix b/pkgs/servers/mail/postfix/default.nix index 0bfc31580e1..fde49e6e4d4 100644 --- a/pkgs/servers/mail/postfix/default.nix +++ b/pkgs/servers/mail/postfix/default.nix @@ -34,7 +34,7 @@ stdenv.mkDerivation rec { export sample_directory=$out/share/postfix/doc/samples export readme_directory=$out/share/postfix/doc - make makefiles CCARGS='-DUSE_TLS -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I${cyrus_sasl}/include/sasl' AUXLIBS='-lssl -lcrypto -lsasl2 -ldb -lnsl' + make makefiles CCARGS='-DUSE_TLS -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I${cyrus_sasl}/include/sasl -fPIE -fstack-protector-all --param ssp-buffer-size=4 -O2 -D_FORTIFY_SOURCE=2' AUXLIBS='-lssl -lcrypto -lsasl2 -ldb -lnsl -pie -Wl,-z,relro,-z,now' ''; installPhase = '' |