[arch-dev-public] New CFLAGS/LDFLAGS plus complete toolchain rebuild

[Pierre Schmitz]

On Sun, 14 Aug 2011 21:42:37 +1000, Allan McRae wrote:
> This has been discussed a couple of times previously on the mailing
> lists and there were no objections so I have finally gotten around to
> adding some hardening options to our CFLAGS/LDFLAGS.  With
> pacman-3.5.4-4 the defaults in makepkg.conf become:
> 
> CFLAGS="-march=i686 -mtune=generic -O2 -pipe -fstack-protector
> --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
> LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,--hash-style=gnu"

Note: you need at least devtools 0.9.25 in order to build with these
flags using the wrapper tools.

-- 
Pierre Schmitz, https://users.archlinux.de/~pierre