X-Git-Url: https://ruderich.org/simon/gitweb/?p=blhc%2Fblhc.git;a=blobdiff_plain;f=README;h=b60004cc9a7c8f41fd17b25ce4fd710f90ff4ddc;hp=c4e81516e53e968f7aa169cba97a09291f6dc21b;hb=c2874d0d8e4579450add73e804f400fdd7f2f456;hpb=848cc5dffc059fa04e263e7287d0d0a780afe6ea diff --git a/README b/README index c4e8151..b60004c 100644 --- a/README +++ b/README @@ -67,7 +67,7 @@ Consider the following compiler line: blhc generates the following warnings because all hardening flags are missing: - CFLAGS missing (-fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -Werror=format-security): gcc -g -O2 -o test test.c + CFLAGS missing (-fstack-protector-strong -Wformat -Werror=format-security): gcc -g -O2 -o test test.c CPPFLAGS missing (-D_FORTIFY_SOURCE=2): gcc -g -O2 -o test test.c LDFLAGS missing (-Wl,-z,relro): gcc -g -O2 -o test test.c @@ -120,7 +120,7 @@ real compile process (output of dpkg-buildpackage): dpkg-buildpackage: ... If it's not present no compiler commands are detected. In case you don't use -dpkp-buildpackage but still want to check a build log, adding it as first line +dpkg-buildpackage but still want to check a build log, adding it as first line should work fine. To prevent false positives when checking debug builds, compiler lines @@ -174,7 +174,7 @@ LICENSE blhc is licensed under GPL version 3 or later. -Copyright (C) 2012-2015 Simon Ruderich +Copyright (C) 2012-2020 Simon Ruderich This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by