inference c8d2974c94

Add linker stripping flag.

2023-01-17 05:05:52 +00:00

..

basic.conf

Add linker stripping flag.

2023-01-17 05:03:55 +00:00

firefox.conf

Enable Firefox hardening flags since it is classified as an untrusted program which executes external, untrusted code.

2023-01-17 05:01:05 +00:00

gcc-basic.conf

Add linker stripping flag.

2023-01-17 05:05:52 +00:00

gcc-nolto-nopie.conf

Fix stack clash protection compiler hardening flag. Sort all flags A-Z.

2023-01-17 01:39:03 +00:00

gcc-nolto.conf

Remove hardening flags to allow untrusted packages to be specifically hardened using envs. Move linker stripping flag to standard linker flags.

2023-01-17 05:02:48 +00:00

gcc-nopie.conf

Sort all flags A-Z.

2023-01-17 01:41:45 +00:00

gcc.conf

Sort all flags A-Z.

2023-01-17 01:43:19 +00:00

nolto-nopie.conf

Remove FORTIFY_SOURCE since it is not compatible with or used by musl libc. Switch stack protector from all to strong since strong covers the entire practical stack smashing protection threat model. Switch -ftrivial-auto-var-init from pattern to zero since it is no longer being removed from Clang and is more suitable for hardening. Sort compiler flags A-Z. Sort linker flags A-Z.

2023-01-17 01:45:41 +00:00

nolto.conf

Remove FORTIFY_SOURCE since it is not compatible with or used by musl libc. Switch stack protector from all to strong since strong covers the entire practical stack smashing protection threat model. Switch -ftrivial-auto-var-init from pattern to zero since it is no longer being removed from Clang and is more suitable for hardening. Sort compiler flags A-Z.

2023-01-17 01:47:33 +00:00

nopie.conf

Remove FORTIFY_SOURCE since it is not compatible with or used by musl libc. Switch stack protector from all to strong since strong covers the entire practical stack smashing protection threat model. Switch -ftrivial-auto-var-init from pattern to zero since it is no longer being removed from Clang and is more suitable for hardening. Sort compiler flags A-Z.

2023-01-17 01:49:32 +00:00

notmpfs.conf

Create No tmpfs env for packages which are too large to be compiled in memory.

2022-12-29 09:39:19 +00:00