[arch-dev-public] New CFLAGS/LDFLAGS plus complete toolchain rebuild

Pierre Schmitz pierre at archlinux.de
Sun Aug 14 08:20:43 EDT 2011

On Sun, 14 Aug 2011 21:42:37 +1000, Allan McRae wrote:
> This has been discussed a couple of times previously on the mailing
> lists and there were no objections so I have finally gotten around to
> adding some hardening options to our CFLAGS/LDFLAGS.  With
> pacman-3.5.4-4 the defaults in makepkg.conf become:
> CFLAGS="-march=i686 -mtune=generic -O2 -pipe -fstack-protector
> --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
> LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,--hash-style=gnu"

Note: you need at least devtools 0.9.25 in order to build with these
flags using the wrapper tools.

Pierre Schmitz, https://users.archlinux.de/~pierre

More information about the arch-dev-public mailing list