diff options
| author | Luke Granger-Brown <git@lukegb.com> | 2023-02-10 20:02:02 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-02-10 20:02:02 +0000 |
| commit | dc4cd5c7b89a07a51c5661ed605ded1a8b4886c8 (patch) | |
| tree | d7f417ce1419614df3edabe0dd8ad87d2546c46a | |
| parent | Merge pull request #215681 from superherointj/fix-gpt2tc-fetch-url (diff) | |
| parent | envoy: build with noexecstack (diff) | |
| download | nixpkgs-dc4cd5c7b89a07a51c5661ed605ded1a8b4886c8.tar.gz | |
Merge pull request #215501 from Trundle/envoy-noexecstack
envoy: build with noexecstack
| -rw-r--r-- | pkgs/servers/http/envoy/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/servers/http/envoy/default.nix b/pkgs/servers/http/envoy/default.nix index aed6a36be1d7..4a219a9cfb05 100644 --- a/pkgs/servers/http/envoy/default.nix +++ b/pkgs/servers/http/envoy/default.nix @@ -149,6 +149,7 @@ buildBazelPackage rec { "--spawn_strategy=standalone" "--noexperimental_strict_action_env" "--cxxopt=-Wno-error" + "--linkopt=-Wl,-z,noexecstack" # Force use of system Java. "--extra_toolchains=@local_jdk//:all" |