From 6d4f8d4dbcdfa1e069ccc58859b3ef831fa503b3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc=20Andr=C3=A9=20Tanner?= Date: Sun, 6 Mar 2016 21:50:02 +0100 Subject: build: remove hardening compiler flags for now They do not seem to be supported on all platforms (e.g. FreeBSD). Users who know what they are doing can still provide them via the regular $CFLAGS mechanism. Eventually these should be tested by a handwritten configure script and added to config.mk iff they are supported by the toolchain. --- config.mk | 9 --------- 1 file changed, 9 deletions(-) (limited to 'config.mk') diff --git a/config.mk b/config.mk index f083a99..bdc1702 100644 --- a/config.mk +++ b/config.mk @@ -66,12 +66,3 @@ DEBUG_CFLAGS_VIS = ${CFLAGS_VIS} -UNDEBUG -O0 -g -ggdb -Wall -Wextra -pedantic - CC ?= cc STRIP ?= strip - -# Hardening -ifeq (${CC},gcc) - CFLAGS += -fPIC -fstack-protector-all -D_FORTIFY_SOURCE=2 - LDFLAGS += -z now -z relro -pie -else ifeq (${CC},clang) - CFLAGS += -fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2 - LDFLAGS += -z now -z relro -pie -endif -- cgit v1.2.3