Skip to content
  • Jacob Appelbaum's avatar
    Add support for gcc compiler/linker hardening flags. · 04fa935e
    Jacob Appelbaum authored
    This patch adds support for two new configure options:
        '--enable-gcc-hardening'
        This sets CFLAGS to include:
            "-D_FORTIFY_SOURCE=2 -fstack-protector-all"
            "-fwrapv -fPIE -Wstack-protector -Wformat -Wformat-security"
            "-Wpointer-sign"
        It sets LDFLAGS to include:
            "-pie"
    
        '--enable-linker-hardening'
        This sets LDFLAGS to include:
            " -z relro -z now"
    04fa935e