Add -fPIE to C_SEC flags to enable PIE at compile-time (only link-time PIE is unsupported for encountered packages).
This commit is contained in:
parent
ca835ca4e1
commit
c69b60c3ba
2
portage/env/nopie.conf
vendored
2
portage/env/nopie.conf
vendored
@ -20,7 +20,7 @@ OBJDUMP="llvm-objdump"
|
|||||||
|
|
||||||
# Flags.
|
# Flags.
|
||||||
## Hardening flags.
|
## Hardening flags.
|
||||||
C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
|
C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
|
||||||
LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
|
LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
|
||||||
|
|
||||||
## Common flags.
|
## Common flags.
|
||||||
|
Loading…
x
Reference in New Issue
Block a user