diff options
| author | jvoisin <julien.voisin@dustri.org> | 2015-01-14 01:09:30 +0100 |
|---|---|---|
| committer | jvoisin <julien.voisin@dustri.org> | 2015-01-14 01:09:30 +0100 |
| commit | a83c61a66ea7a0bfc21d86fddc9ea5325c86ac24 (patch) | |
| tree | efeb59b3d87f291978b4d20dda7ff64b29d67580 | |
| parent | 8bccf8cb189ba2afcb1fa0f274d2c104dde09398 (diff) | |
| download | vis-a83c61a66ea7a0bfc21d86fddc9ea5325c86ac24.tar.gz vis-a83c61a66ea7a0bfc21d86fddc9ea5325c86ac24.tar.xz | |
Add hardening flags for gcc and clang
| -rw-r--r-- | config.mk | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -33,3 +33,12 @@ DEBUG_CFLAGS = ${CFLAGS} -UNDEBUG -O0 -g -ggdb -Wall -Wextra -Wno-missing-field- CC ?= cc STRIP ?= strip + +# Hardening +ifeq (${CC},gcc) + CFLAGS += -fPIC -fstack-protector-all -D_FORTIFY_SOURCE=2 + LDFLAGS += -z now -z relro -pie +else ifeq (${CC},clang) + CFLAGS += -fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2 + LDFLAGS += -z now -z relro -pie +endif |