diff --git a/dist/release.sh b/dist/release.sh
index bc7d157..9d2ca3f 100755
--- a/dist/release.sh
+++ b/dist/release.sh
@@ -10,6 +10,7 @@ cp -rv "comp" "${out}"
 
 go build -trimpath -v -o "${out}/bin/" -ldflags "-s -w
   -X git.gensokyo.uk/security/fortify/internal.Version=${VERSION}
+  -X git.gensokyo.uk/security/fortify/internal.Fortify=/usr/bin/fortify
   -X git.gensokyo.uk/security/fortify/internal.Fsu=/usr/bin/fsu
   -X git.gensokyo.uk/security/fortify/internal.Finit=/usr/libexec/fortify/finit
   -X main.Fmain=/usr/bin/fortify
diff --git a/internal/path.go b/internal/path.go
index 5138853..b6fbff0 100644
--- a/internal/path.go
+++ b/internal/path.go
@@ -3,8 +3,9 @@ package internal
 import "path"
 
 var (
-	Fsu   = compPoison
-	Finit = compPoison
+	Fortify = compPoison
+	Fsu     = compPoison
+	Finit   = compPoison
 )
 
 func Path(p string) (string, bool) {
diff --git a/package.nix b/package.nix
index d131b18..afc8859 100644
--- a/package.nix
+++ b/package.nix
@@ -45,6 +45,7 @@ buildGoModule rec {
         Version = "v${version}";
         Fsu = "/run/wrappers/bin/fsu";
         Finit = "${placeholder "out"}/libexec/finit";
+        Fortify = "${placeholder "out"}/bin/fortify";
       };
 
   # nix build environment does not allow acls