From a83c61a66ea7a0bfc21d86fddc9ea5325c86ac24 Mon Sep 17 00:00:00 2001
From: jvoisin <julien.voisin@dustri.org>
Date: Wed, 14 Jan 2015 01:09:30 +0100
Subject: Add hardening flags for gcc and clang

---
 config.mk | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'config.mk')

diff --git a/config.mk b/config.mk
index 6ba65cf..efc85b5 100644
--- a/config.mk
+++ b/config.mk
@@ -33,3 +33,12 @@ DEBUG_CFLAGS = ${CFLAGS} -UNDEBUG -O0 -g -ggdb -Wall -Wextra -Wno-missing-field-
 
 CC ?= cc
 STRIP ?= strip
+
+# Hardening
+ifeq (${CC},gcc)
+	CFLAGS += -fPIC -fstack-protector-all -D_FORTIFY_SOURCE=2
+	LDFLAGS += -z now -z relro -pie
+else ifeq (${CC},clang)
+	CFLAGS += -fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2
+	LDFLAGS += -z now -z relro -pie
+endif
-- 
cgit v1.2.3