From 60c5c1c24448bc6390f9f607e2ee2e3782a122f6 Mon Sep 17 00:00:00 2001
From: Simon Ruderich <simon@ruderich.org>
Date: Fri, 19 Aug 2011 02:14:00 +0200
Subject: [PATCH] configure.ac: Compile with additional security features if
 GCC is used.

See http://wiki.debian.org/Hardening for more information.
---
 configure.ac | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/configure.ac b/configure.ac
index 6cfb3f7..82be751 100644
--- a/configure.ac
+++ b/configure.ac
@@ -11,6 +11,9 @@ AC_PROG_CC
 if test "x$GCC" = xyes; then
     CFLAGS="-std=c89 -pedantic -Wall -Wextra -Werror $CFLAGS"
     CFLAGS="-D_XOPEN_SOURCE=500 -Wno-error=int-to-pointer-cast $CFLAGS"
+    # Additional security flags.
+    CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2 -fstack-protector -fPIE -pie"
+    LDFLAGS="$LDFLAGS -z relro -z now"
 fi
 
 AC_CHECK_LIB([pthread], [pthread_create],
-- 
2.44.1