14 Aug
2011
14 Aug
'11
8:20 a.m.
On Sun, 14 Aug 2011 21:42:37 +1000, Allan McRae wrote:
This has been discussed a couple of times previously on the mailing lists and there were no objections so I have finally gotten around to adding some hardening options to our CFLAGS/LDFLAGS. With pacman-3.5.4-4 the defaults in makepkg.conf become:
CFLAGS="-march=i686 -mtune=generic -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2" LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,--hash-style=gnu"
Note: you need at least devtools 0.9.25 in order to build with these flags using the wrapper tools. -- Pierre Schmitz, https://users.archlinux.de/~pierre