Add -fPIE to C_SEC flags to enable PIE at compile-time (only link-time PIE is unsupported for encountered packages).

This commit is contained in:
inference 2022-06-11 18:56:30 +01:00
parent ca835ca4e1
commit c69b60c3ba

View File

@ -20,7 +20,7 @@ OBJDUMP="llvm-objdump"
# Flags. # Flags.
## Hardening flags. ## Hardening flags.
C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2" C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro" LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
## Common flags. ## Common flags.