Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorkpcyrd <kpcyrd@archlinux.org>2023-09-05 16:37:28 +0200
committerLevente Polyak <anthraxx@archlinux.org>2024-02-14 02:08:01 +0100
commitc79a99314822fe4238b66f92c81b288208073a24 (patch)
treee05615146247e8e4d6238d958c9922dc93d3c196
parent6d0ac6b9a815cfce001db018a05c7ffd0ed14a98 (diff)
feat(makepkg.conf): Increase _FORTIFY_SOURCE level to 3
RFC: https://rfc.archlinux.page/0017-increase-fortification-level/
-rw-r--r--config/makepkg/x86_64.conf2
-rw-r--r--config/makepkg/x86_64_v3.conf2
2 files changed, 2 insertions, 2 deletions
diff --git a/config/makepkg/x86_64.conf b/config/makepkg/x86_64.conf
index e258e07..0591c48 100644
--- a/config/makepkg/x86_64.conf
+++ b/config/makepkg/x86_64.conf
@@ -41,7 +41,7 @@ CHOST="x86_64-pc-linux-gnu"
#-- Compiler and Linker Flags
#CPPFLAGS=""
CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions \
- -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \
+ -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \
-fstack-clash-protection -fcf-protection"
CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \
diff --git a/config/makepkg/x86_64_v3.conf b/config/makepkg/x86_64_v3.conf
index 3832b19..32e5067 100644
--- a/config/makepkg/x86_64_v3.conf
+++ b/config/makepkg/x86_64_v3.conf
@@ -41,7 +41,7 @@ CHOST="x86_64-pc-linux-gnu"
#-- Compiler and Linker Flags
#CPPFLAGS=""
CFLAGS="-march=x86-64-v3 -mtune=generic -O2 -pipe -fno-plt -fexceptions \
- -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \
+ -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \
-fstack-clash-protection -fcf-protection"
CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \