From c79a99314822fe4238b66f92c81b288208073a24 Mon Sep 17 00:00:00 2001 From: kpcyrd Date: Tue, 5 Sep 2023 16:37:28 +0200 Subject: feat(makepkg.conf): Increase _FORTIFY_SOURCE level to 3 RFC: https://rfc.archlinux.page/0017-increase-fortification-level/ --- config/makepkg/x86_64.conf | 2 +- config/makepkg/x86_64_v3.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/config/makepkg/x86_64.conf b/config/makepkg/x86_64.conf index e258e07..0591c48 100644 --- a/config/makepkg/x86_64.conf +++ b/config/makepkg/x86_64.conf @@ -41,7 +41,7 @@ CHOST="x86_64-pc-linux-gnu" #-- Compiler and Linker Flags #CPPFLAGS="" CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions \ - -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \ + -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \ -fstack-clash-protection -fcf-protection" CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS" LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \ diff --git a/config/makepkg/x86_64_v3.conf b/config/makepkg/x86_64_v3.conf index 3832b19..32e5067 100644 --- a/config/makepkg/x86_64_v3.conf +++ b/config/makepkg/x86_64_v3.conf @@ -41,7 +41,7 @@ CHOST="x86_64-pc-linux-gnu" #-- Compiler and Linker Flags #CPPFLAGS="" CFLAGS="-march=x86-64-v3 -mtune=generic -O2 -pipe -fno-plt -fexceptions \ - -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \ + -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \ -fstack-clash-protection -fcf-protection" CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS" LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \ -- cgit v1.2.3-54-g00ecf