diff --git a/portage/env/malloc-nolto-nopie.conf b/portage/env/malloc-nolto-nopie.conf index 08554e1..5729183 100644 --- a/portage/env/malloc-nolto-nopie.conf +++ b/portage/env/malloc-nolto-nopie.conf @@ -3,12 +3,12 @@ # Copyright 2022 Inference # License: BSD 3-Clause Clear -# 0.0.0.0 +# 0.1.0.1 # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro -L/usr/local/lib -lhardened_malloc" ## Compiler flags. diff --git a/portage/env/malloc-nolto.conf b/portage/env/malloc-nolto.conf index c13746f..94bbe5e 100644 --- a/portage/env/malloc-nolto.conf +++ b/portage/env/malloc-nolto.conf @@ -3,12 +3,12 @@ # Copyright 2022 Inference # License: BSD 3-Clause Clear -# 0.0.0.0 +# 0.1.0.1 # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro -L/usr/local/lib -lhardened_malloc" ## Compiler flags. diff --git a/portage/env/malloc-nopie.conf b/portage/env/malloc-nopie.conf index 6106907..e23eb8f 100644 --- a/portage/env/malloc-nopie.conf +++ b/portage/env/malloc-nopie.conf @@ -3,12 +3,12 @@ # Copyright 2022 Inference # License: BSD 3-Clause Clear -# 0.0.0.0 +# 0.1.0.1 # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro -L/usr/local/lib -lhardened_malloc" ## Compiler flags. diff --git a/portage/env/nolto-nopie.conf b/portage/env/nolto-nopie.conf index fb77f64..aa9a8f7 100644 --- a/portage/env/nolto-nopie.conf +++ b/portage/env/nolto-nopie.conf @@ -1,11 +1,14 @@ -# Portage env Clang - No LTO, no PIE. +# Portage - env - Clang - No LTO, no PIE # Copyright 2022 Inference +# License: BSD 3-Clause Clear + +# 0.0.0.0 # Flags. ## Hardening flags. -C_SEC="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro" ## Compiler flags. diff --git a/portage/env/nolto.conf b/portage/env/nolto.conf index a977b81..3495359 100644 --- a/portage/env/nolto.conf +++ b/portage/env/nolto.conf @@ -1,11 +1,14 @@ # Portage - env - Clang - No LTO # Copyright 2022 Inference +# License: BSD 3-Clause Clear + +# 0.0.0.0 # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro" ## Compiler flags. diff --git a/portage/env/nopie.conf b/portage/env/nopie.conf index 47b4aa0..407680c 100644 --- a/portage/env/nopie.conf +++ b/portage/env/nopie.conf @@ -1,11 +1,14 @@ # Portage env Clang - No PIE. # Copyright 2022 Inference +# License: BSD 3-Clause Clear + +# 0.0.0.0 # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro" ## Compiler flags. diff --git a/portage/make.conf b/portage/make.conf index f8abb03..cac4c2d 100644 --- a/portage/make.conf +++ b/portage/make.conf @@ -20,7 +20,7 @@ STRIP="llvm-strip" # Flags. ## Hardening flags. -C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang -fwrapv" +C_SEC="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2 -ftrivial-auto-var-init=pattern -fwrapv" LD_SEC="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro" ## Compiler flags.