From b8255e9e175ed287e7d91f96fc8733b7956ebbce Mon Sep 17 00:00:00 2001 From: Philip Date: Sat, 15 Jul 2017 12:02:13 +0200 Subject: [PATCH] enable full RELRO and BIND_NOW --- data/make.conf.d/i686.conf | 2 +- data/make.conf.d/multilib.conf | 2 +- data/make.conf.d/x86_64.conf | 2 +- data/makepkg.conf | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/data/make.conf.d/i686.conf b/data/make.conf.d/i686.conf index b66d84c..ee72536 100644 --- a/data/make.conf.d/i686.conf +++ b/data/make.conf.d/i686.conf @@ -1,3 +1,3 @@ carch="i686" chost="i686-pc-linux-gnu" -cflags="-march=i686 -mtune=generic -O2 -pipe -fstack-protector-strong" +cflags="-march=i686 -mtune=generic -O2 -pipe -fstack-protector-strong -fno-plt" diff --git a/data/make.conf.d/multilib.conf b/data/make.conf.d/multilib.conf index 631f6d1..481ce5c 100644 --- a/data/make.conf.d/multilib.conf +++ b/data/make.conf.d/multilib.conf @@ -1,3 +1,3 @@ carch="x86_64" chost="x86_64-pc-linux-gnu" -cflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong" +cflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong -fno-plt" diff --git a/data/make.conf.d/x86_64.conf b/data/make.conf.d/x86_64.conf index 631f6d1..481ce5c 100644 --- a/data/make.conf.d/x86_64.conf +++ b/data/make.conf.d/x86_64.conf @@ -1,3 +1,3 @@ carch="x86_64" chost="x86_64-pc-linux-gnu" -cflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong" +cflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong -fno-plt" diff --git a/data/makepkg.conf b/data/makepkg.conf index a663b1a..d6c7f20 100644 --- a/data/makepkg.conf +++ b/data/makepkg.conf @@ -39,7 +39,7 @@ CHOST="@CHOST@" CPPFLAGS="-D_FORTIFY_SOURCE=2" CFLAGS="@CFLAGS@" CXXFLAGS="@CFLAGS@" -LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro" +LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now" #-- Make Flags: change this for DistCC/SMP systems #MAKEFLAGS="-j2" #-- Debugging flags