From: Simon Ruderich Date: Tue, 15 Jan 2013 19:56:34 +0000 (+0100) Subject: configure.ac: Remove --param=ssp-buffer-size=1. X-Git-Url: https://ruderich.org/simon/gitweb/?p=tlsproxy%2Ftlsproxy.git;a=commitdiff_plain;h=b968543c8d621acf469a2aaab3f5e3dc42350e2d configure.ac: Remove --param=ssp-buffer-size=1. -fstack-protector-all already protects all functions. --- diff --git a/configure.ac b/configure.ac index e2f5480..3da89e8 100644 --- a/configure.ac +++ b/configure.ac @@ -29,7 +29,7 @@ if test "x$GCC" = xyes; then CFLAGS="-Wno-error=int-to-pointer-cast $CFLAGS" CPPFLAGS="-D_XOPEN_SOURCE=500 $CPPFLAGS" # Additional hardening flags. - CFLAGS="-fPIE -fstack-protector-all --param=ssp-buffer-size=1 -Wformat -Werror=format-security $CFLAGS" + CFLAGS="-fPIE -fstack-protector-all -Wformat -Werror=format-security $CFLAGS" CPPFLAGS="-D_FORTIFY_SOURCE=2 $CPPFLAGS" LDFLAGS="-fPIE -pie -Wl,-z,relro -Wl,-z,now $LDFLAGS" fi