Add control-flow protection
This commit is contained in:
parent
0a4d330123
commit
8a34c3db5a
4
aa000-0/portage/env/gcc-nolto.conf
vendored
4
aa000-0/portage/env/gcc-nolto.conf
vendored
@ -4,12 +4,12 @@
|
||||
# Copyright 2022 Jake Winters
|
||||
# SPDX-License-Identifier: BSD-3-Clause
|
||||
|
||||
# Version: 10.0.0-alpha.1+17
|
||||
# Version: 10.0.0-alpha.2+18
|
||||
|
||||
|
||||
# Flags
|
||||
# Hardening flags
|
||||
C_SEC="-fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
C_SEC="-fcf-protection=full -fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
LD_SEC="-Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
|
||||
## Compiler flags
|
||||
CFLAGS="-march=znver3 -mtune=znver3 -O2 -pipe ${C_SEC}"
|
||||
|
4
aa000-0/portage/env/gcc.conf
vendored
4
aa000-0/portage/env/gcc.conf
vendored
@ -4,12 +4,12 @@
|
||||
# Copyright 2023 Jake Winters
|
||||
# SPDX-License-Identifier: BSD-3-Clause
|
||||
|
||||
# Version: 3.0.0-alpha.1+5
|
||||
# Version: 3.0.0-alpha.2+6
|
||||
|
||||
|
||||
# Flags
|
||||
# Hardening flags
|
||||
C_SEC="-fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
C_SEC="-fcf-protection=full -fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
LD_SEC="-Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
|
||||
## Compiler flags
|
||||
CFLAGS="-flto=4 -march=znver3 -mtune=znver3 -O2 -pipe ${C_SEC}"
|
||||
|
4
aa000-0/portage/env/nolto.conf
vendored
4
aa000-0/portage/env/nolto.conf
vendored
@ -4,12 +4,12 @@
|
||||
# Copyright 2023 Jake Winters
|
||||
# SPDX-License-Identifier: BSD-3-Clause
|
||||
|
||||
# Version: 5.0.0-alpha.1+9
|
||||
# Version: 5.0.0-alpha.2+10
|
||||
|
||||
|
||||
# Flags
|
||||
## Hardening flags
|
||||
C_SEC="-fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
C_SEC="-fcf-protection=full -fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv"
|
||||
LD_SEC="-Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
|
||||
## Compiler flags
|
||||
CFLAGS="-march=znver3 -mtune=znver3 -O2 -pipe ${C_SEC}"
|
||||
|
Loading…
x
Reference in New Issue
Block a user