From 38ba6fb329faf4b9afa2aaedda5d2877abac410a Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Sun, 24 Aug 2025 00:02:05 +0200
Subject: [PATCH] cpython: enable pie

---
 pkgs/development/interpreters/python/cpython/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/interpreters/python/cpython/default.nix b/pkgs/development/interpreters/python/cpython/default.nix
index 3e1d6cc63ff1..f9e07355025c 100644
--- a/pkgs/development/interpreters/python/cpython/default.nix
+++ b/pkgs/development/interpreters/python/cpython/default.nix
@@ -604,6 +604,8 @@ stdenv.mkDerivation (finalAttrs: {
       export CFLAGS_NODIST="-fno-semantic-interposition"
     '';
 
+  hardeningEnable = [ "pie" ];
+
   setupHook = python-setup-hook sitePackages;
 
   postInstall =