diff options
| author | Eli Schwartz | 2021-04-07 19:33:47 -0400 |
|---|---|---|
| committer | Eli Schwartz | 2021-04-07 19:33:47 -0400 |
| commit | 68b487215d1887bc30d078e4b14e54072f1f4981 (patch) | |
| tree | 49d863f0d7fd6def470d776c231d8739bd5166c9 | |
| parent | 29195742eeab3f0ca8392eeb2cacd602510cb756 (diff) | |
| download | aur-68b487215d1887bc30d078e4b14e54072f1f4981.tar.gz | |
pacman-git: sync makepkg.conf changes from [core]
Contains updated build flags for hardening etc. in accordance with:
https://lists.archlinux.org/pipermail/arch-dev-public/2021-March/030374.html
https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/3
| -rw-r--r-- | makepkg.conf | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/makepkg.conf b/makepkg.conf index 5353d0ed2c6e..0ad85e8fdbb2 100644 --- a/makepkg.conf +++ b/makepkg.conf @@ -36,9 +36,12 @@ CARCH="@CARCH@" CHOST="@CHOST@" #-- Compiler and Linker Flags -CPPFLAGS="-D_FORTIFY_SOURCE=2" -CFLAGS="@CARCHFLAGS@ -mtune=generic -O2 -pipe -fno-plt" -CXXFLAGS="@CARCHFLAGS@ -mtune=generic -O2 -pipe -fno-plt" +#CPPFLAGS="" +CFLAGS="@CARCHFLAGS@ -mtune=generic -O2 -pipe -fno-plt -fexceptions \ + -Wp,-D_FORTIFY_SOURCE=2,-D_GLIBCXX_ASSERTIONS \ + -Wformat -Werror=format-security \ + -fstack-clash-protection -fcf-protection" +CXXFLAGS="$CFLAGS" LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now" #RUSTFLAGS="-C opt-level=2" #-- Make Flags: change this for DistCC/SMP systems |