Enable relro hardening

This commit is contained in:
BtbN 2021-05-15 00:52:12 +02:00
parent 654a6d765e
commit 92da0222d7
3 changed files with 1 additions and 5 deletions

View file

@ -39,4 +39,4 @@ ENV FFBUILD_TARGET_FLAGS="--pkg-config=pkg-config --cross-prefix=x86_64-ffbuild-
PKG_CONFIG_LIBDIR=/opt/ffbuild/lib/pkgconfig \ PKG_CONFIG_LIBDIR=/opt/ffbuild/lib/pkgconfig \
CFLAGS="-static-libgcc -static-libstdc++ -I/opt/ffbuild/include -O2 -pipe -fPIC -DPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong -pthread" \ CFLAGS="-static-libgcc -static-libstdc++ -I/opt/ffbuild/include -O2 -pipe -fPIC -DPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong -pthread" \
CXXFLAGS="-static-libgcc -static-libstdc++ -I/opt/ffbuild/include -O2 -pipe -fPIC -DPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong -pthread" \ CXXFLAGS="-static-libgcc -static-libstdc++ -I/opt/ffbuild/include -O2 -pipe -fPIC -DPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong -pthread" \
LDFLAGS="-static-libgcc -static-libstdc++ -L/opt/ffbuild/lib -O2 -pipe -fstack-protector-strong -pthread -lm" LDFLAGS="-static-libgcc -static-libstdc++ -L/opt/ffbuild/lib -O2 -pipe -fstack-protector-strong -Wl,-z,relro,-z,now -pthread -lm"

View file

@ -7,8 +7,6 @@ windres = 'i686-w64-mingw32-windres'
exe_wrapper = ['wine'] exe_wrapper = ['wine']
[properties] [properties]
c_link_args = ['-static-libgcc', '-L/opt/ffbuild/lib', '-O2', '-pipe', '-fstack-protector-strong']
cpp_link_args = ['-static-libgcc', '-static-libstdc++', '-L/opt/ffbuild/lib', '-O2', '-pipe', '-fstack-protector-strong']
needs_exe_wrapper = true needs_exe_wrapper = true
[host_machine] [host_machine]

View file

@ -7,8 +7,6 @@ windres = 'x86_64-w64-mingw32-windres'
exe_wrapper = ['wine'] exe_wrapper = ['wine']
[properties] [properties]
c_link_args = ['-static-libgcc', '-L/opt/ffbuild/lib', '-O2', '-pipe', '-fstack-protector-strong']
cpp_link_args = ['-static-libgcc', '-static-libstdc++', '-L/opt/ffbuild/lib', '-O2', '-pipe', '-fstack-protector-strong']
needs_exe_wrapper = true needs_exe_wrapper = true
[host_machine] [host_machine]