Unverified Commit b2c8f47f authored by boklm's avatar boklm
Browse files

gcc: make sure we use the hardening wrapper

parent 34b2deb1
Loading
Loading
Loading
Loading
+17 −0
Original line number Diff line number Diff line
@@ -17,6 +17,23 @@ var:
    [% ELSE -%]
    export LD_LIBRARY_PATH=/var/tmp/dist/gcc/lib64
    [% END -%]

    # Config options for hardening-wrapper
    export DEB_BUILD_HARDENING=1
    export DEB_BUILD_HARDENING_STACKPROTECTOR=1
    export DEB_BUILD_HARDENING_FORTIFY=1
    export DEB_BUILD_HARDENING_FORMAT=1
    export DEB_BUILD_HARDENING_PIE=1

    # Make sure we use the hardening wrapper
    pushd /var/tmp/dist/gcc/bin
    cp /usr/bin/hardened-cc ./
    mv gcc gcc.real
    mv c++ c++.real
    ln -sf hardened-cc gcc
    ln -sf hardened-cc c++
    popd

targets:
  osx-x86_64:
    var: