[gnome-sdk-images] Add fortified CFLAGS



commit 1b733d1419f24d376de3a32e05bf682bd7706554
Author: Alexander Larsson <alexl redhat com>
Date:   Wed Mar 8 19:37:02 2017 +0100

    Add fortified CFLAGS

 org.gnome.Sdk.json.in |   17 +++++++++--------
 1 files changed, 9 insertions(+), 8 deletions(-)
---
diff --git a/org.gnome.Sdk.json.in b/org.gnome.Sdk.json.in
index 307e28c..a95ac03 100644
--- a/org.gnome.Sdk.json.in
+++ b/org.gnome.Sdk.json.in
@@ -50,10 +50,11 @@
                                    "ldconfig -C /usr/etc/ld.so.cache"
                                  ],
     "build-options" : {
-        "cflags": "-O2 -g",
-        "cxxflags": "-O2 -g",
+        "cflags": "-O2 -g -fstack-protector-strong -D_FORTIFY_SOURCE=2",
+        "cxxflags": "-O2 -g -fstack-protector-strong -D_FORTIFY_SOURCE=2",
         "env": {
-            "V": "1"
+            "V": "1",
+            "LDFLAGS": "-fstack-protector-strong -Wl,-z,relro,-z,now"
         }
     },
     "modules": [
@@ -696,10 +697,10 @@
         {
             "name": "vte",
             "build-options" : {
-                "cflags": "-O2 -g  -fPIE -DPIE",
-                "cxxflags": "-O2 -g  -fPIE -DPIE",
+                "cflags": "-O2 -g  -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIE -DPIE",
+                "cxxflags": "-O2 -g  -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIE -DPIE",
                 "env": {
-                    "LDFLAGS": "-Wl,-z,relro -Wl,-z,now -pie -lssp"
+                    "LDFLAGS": "-fstack-protector-strong -Wl,-z,relro -Wl,-z,now -pie -lssp"
                 }
             },
             "config-opts": ["--disable-gnome-pty-helper",
@@ -719,8 +720,8 @@
             "cleanup-platform": [ "/libexec/webkit2gtk-4.0/MiniBrowser" ],
             "cmake": true,
             "build-options" : {
-                "cflags": "-O2 -g1",
-                "cxxflags": "-O2 -g1",
+                "cflags": "-O2 -g1 -fstack-protector-strong -D_FORTIFY_SOURCE=2",
+                "cxxflags": "-O2 -g1 -fstack-protector-strong -D_FORTIFY_SOURCE=2",
                 "arch" : {
                     "i386" : {
                         "config-opts" : [


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]