X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=configure.ac;h=ab5135d479ccb1a52fa805f1d220c36fa19d4119;hb=a64101800c79c852cc4ab9d445c35aad0a6457eb;hp=6cfb3f7a062687dc242eb3d592f4fb64d85aad3d;hpb=2a2a0a1691c26cfdbb3d248efe485f1a8bbf7e5b;p=tlsproxy%2Ftlsproxy.git

diff --git a/configure.ac b/configure.ac
index 6cfb3f7..ab5135d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,3 +1,19 @@
+dnl Copyright (C) 2011-2013  Simon Ruderich
+dnl
+dnl This program is free software: you can redistribute it and/or modify
+dnl it under the terms of the GNU General Public License as published by
+dnl the Free Software Foundation, either version 3 of the License, or
+dnl (at your option) any later version.
+dnl
+dnl This program is distributed in the hope that it will be useful,
+dnl but WITHOUT ANY WARRANTY; without even the implied warranty of
+dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+dnl GNU General Public License for more details.
+dnl
+dnl You should have received a copy of the GNU General Public License
+dnl along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+
 AC_INIT([tlsproxy], [0.2], [simon@ruderich.org])
 
 AC_CONFIG_AUX_DIR([build-aux])
@@ -10,7 +26,12 @@ AC_PROG_CC
 
 if test "x$GCC" = xyes; then
     CFLAGS="-std=c89 -pedantic -Wall -Wextra -Werror $CFLAGS"
-    CFLAGS="-D_XOPEN_SOURCE=500 -Wno-error=int-to-pointer-cast $CFLAGS"
+    CFLAGS="-Wno-error=int-to-pointer-cast $CFLAGS"
+    CPPFLAGS="-D_XOPEN_SOURCE=500 $CPPFLAGS"
+    # Additional hardening flags.
+    CFLAGS="-fPIE -fstack-protector-all -Wformat -Werror=format-security $CFLAGS"
+    CPPFLAGS="-D_FORTIFY_SOURCE=2 $CPPFLAGS"
+    LDFLAGS="-fPIE -pie -Wl,-z,relro -Wl,-z,now $LDFLAGS"
 fi
 
 AC_CHECK_LIB([pthread], [pthread_create],