[arch-dev-public] New CFLAGS/LDFLAGS plus complete toolchain rebuild
pierre at archlinux.de
Sun Aug 14 08:20:43 EDT 2011
On Sun, 14 Aug 2011 21:42:37 +1000, Allan McRae wrote:
> This has been discussed a couple of times previously on the mailing
> lists and there were no objections so I have finally gotten around to
> adding some hardening options to our CFLAGS/LDFLAGS. With
> pacman-3.5.4-4 the defaults in makepkg.conf become:
> CFLAGS="-march=i686 -mtune=generic -O2 -pipe -fstack-protector
> --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
Note: you need at least devtools 0.9.25 in order to build with these
flags using the wrapper tools.
Pierre Schmitz, https://users.archlinux.de/~pierre
More information about the arch-dev-public