1 CFLAGS := -Wall -Wextra -Wconversion $(CFLAGS)
2 # Default on Debian, enforce it for all systems.
3 CFLAGS := -fPIE $(CFLAGS)
4 LDFLAGS := -fPIE -pie $(LDFLAGS)
6 # DEB_BUILD_MAINT_OPTIONS='qa=+all,-canary hardening=+all reproducible=+all,-fixdebugpath' dpkg-buildflags --export=make
7 export CFLAGS := -g -O2 -Werror=array-bounds -Werror=clobbered -Werror=volatile-register-var -Werror=implicit-function-declaration -fstack-protector-strong -Wformat -Werror=format-security $(CFLAGS)
8 export CPPFLAGS := -Wdate-time -D_FORTIFY_SOURCE=2 $(CPPFLAGS)
9 export LDFLAGS := -Wl,-z,relro -Wl,-z,now $(LDFLAGS)