X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=configure.ac;fp=configure.ac;h=4c7c937d77855d9daa1d40e252cc180575f0147c;hb=36c08222306c7bca79f10255a945ffb00803e05c;hp=82be75124597f229f49e626c176b030b55e02a13;hpb=8fd61ea9f6e79de1d7c3943c9271511cf2827761;p=tlsproxy%2Ftlsproxy.git

diff --git a/configure.ac b/configure.ac
index 82be751..4c7c937 100644
--- a/configure.ac
+++ b/configure.ac
@@ -12,8 +12,11 @@ if test "x$GCC" = xyes; then
     CFLAGS="-std=c89 -pedantic -Wall -Wextra -Werror $CFLAGS"
     CFLAGS="-D_XOPEN_SOURCE=500 -Wno-error=int-to-pointer-cast $CFLAGS"
     # Additional security flags.
-    CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2 -fstack-protector -fPIE -pie"
-    LDFLAGS="$LDFLAGS -z relro -z now"
+    CFLAGS="$CFLAGS -Wformat -Wformat-security -Werror=format-security"
+    CFLAGS="$CFLAGS -fstack-protector-all -Wstack-protector"
+    CFLAGS="$CFLAGS --param ssp-buffer-size=1"
+    CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2 -fPIE"
+    LDFLAGS="$LDFLAGS -Wl,-z,relro -Wl,-z,now -fPIE -pie"
 fi
 
 AC_CHECK_LIB([pthread], [pthread_create],