From 558cfda92d46baf905c1fad7814b1c92d1ce752f Mon Sep 17 00:00:00 2001 From: Simon Ruderich Date: Sun, 4 Nov 2018 08:21:33 +0100 Subject: [PATCH] Makefile: use additional hardening flags from Debian --- Makefile | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/Makefile b/Makefile index 48d848a..8ffbbff 100644 --- a/Makefile +++ b/Makefile @@ -1,6 +1,12 @@ -CFLAGS := -g -O2 -fPIE -fstack-protector-strong -Wall -Wextra -Wconversion $(CFLAGS) -CPPFLAGS := -D_FORTIFY_SOURCE=2 $(CPPFLAGS) -LDFLAGS := -fPIE -pie -Wl,-z,relro -Wl,-z,now $(LDFLAGS) +CFLAGS := -Wall -Wextra -Wconversion $(CFLAGS) +# Default on Debian, enforce it for all systems. +CFLAGS := -fPIE $(CFLAGS) +LDFLAGS := -fPIE -pie $(LDFLAGS) + +# DEB_BUILD_MAINT_OPTIONS='qa=+all,-canary hardening=+all reproducible=+all,-fixdebugpath' dpkg-buildflags --export=make +export CFLAGS := -g -O2 -Werror=array-bounds -Werror=clobbered -Werror=volatile-register-var -Werror=implicit-function-declaration -fstack-protector-strong -Wformat -Werror=format-security $(CFLAGS) +export CPPFLAGS := -Wdate-time -D_FORTIFY_SOURCE=2 $(CPPFLAGS) +export LDFLAGS := -Wl,-z,relro -Wl,-z,now $(LDFLAGS) ptyas: ptyas.c -- 2.43.2