-dnl Copyright (C) 2011-2012 Simon Ruderich
+dnl Copyright (C) 2011-2013 Simon Ruderich
dnl
dnl This program is free software: you can redistribute it and/or modify
dnl it under the terms of the GNU General Public License as published by
if test "x$GCC" = xyes; then
CFLAGS="-std=c89 -pedantic -Wall -Wextra -Werror $CFLAGS"
- CFLAGS="-D_XOPEN_SOURCE=500 -Wno-error=int-to-pointer-cast $CFLAGS"
- # Additional security flags.
- CFLAGS="$CFLAGS -Wformat -Wformat-security -Werror=format-security"
- CFLAGS="$CFLAGS -fstack-protector-all -Wstack-protector"
- CFLAGS="$CFLAGS --param ssp-buffer-size=1"
- CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2 -fPIE"
- LDFLAGS="$LDFLAGS -Wl,-z,relro -Wl,-z,now -fPIE -pie"
+ CFLAGS="-Wno-error=int-to-pointer-cast $CFLAGS"
+ CPPFLAGS="-D_XOPEN_SOURCE=500 $CPPFLAGS"
+ # Additional hardening flags.
+ CFLAGS="-fPIE -fstack-protector-all -Wformat -Werror=format-security $CFLAGS"
+ CPPFLAGS="-D_FORTIFY_SOURCE=2 $CPPFLAGS"
+ LDFLAGS="-fPIE -pie -Wl,-z,relro -Wl,-z,now $LDFLAGS"
fi
AC_CHECK_LIB([pthread], [pthread_create],