Project

General

Profile

Feature #32

Harden compiler flags

Added by Fanie Riekert almost 7 years ago. Updated almost 7 years ago.

Status:
New
Priority:
Low
Assignee:
-
Start date:
2018-01-07
Due date:
% Done:

0%

Estimated time:

History

#1 Updated by Fanie Riekert almost 7 years ago 

Fedora proposal                                                                                      
  -fstack-clash-protection -fcf-protection=full -mcet                                                  

Hardened Gentoo uses these flags:                                                                    
  CFLAGS="-fPIE -fstack-protector-strong -D_FORTIFY_SOURCE=2"                                          
  LDFLAGS="-Wl,-z,now -Wl,-z,relro"                                                                    

Useful flag  
  -frecord-gcc-switches

Also available in: Atom PDF