diff options
| author | Austin S. Hemmelgarn <austin@netdata.cloud> | 2023-06-28 07:55:45 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-06-28 07:55:45 -0400 |
| commit | bb2135702b0ef443c617cceadec7b8422360035f (patch) | |
| tree | c28e6d4584e2c764ea39be9ff3d190dd6cf6db64 /build_external | |
| parent | 625b929e7ada4b64bb28bfa5b7cc6147f83de8ed (diff) | |
Add hardening options to CFLAGS by default if they are available. (#15087)
* Enable SSP if available.
* Add control flow protection options.
* Add -D_FORTIFY_SOURCE option if supported.
* Add stack-clash-protection option if supported.
* Further build flags cleanup.
Diffstat (limited to 'build_external')
| -rw-r--r-- | build_external/clean-install-arch-debug.Dockerfile | 4 | ||||
| -rw-r--r-- | build_external/clean-install-arch-extras.Dockerfile | 4 | ||||
| -rw-r--r-- | build_external/clean-install-arch.Dockerfile | 4 | ||||
| -rw-r--r-- | build_external/clean-install.Dockerfile | 4 |
4 files changed, 8 insertions, 8 deletions
diff --git a/build_external/clean-install-arch-debug.Dockerfile b/build_external/clean-install-arch-debug.Dockerfile index 046b144f65..5a67bfbc39 100644 --- a/build_external/clean-install-arch-debug.Dockerfile +++ b/build_external/clean-install-arch-debug.Dockerfile @@ -45,8 +45,8 @@ RUN rm -rf autom4te.cache RUN rm -rf .git/ RUN find . -type f >/opt/netdata/manifest -RUN CFLAGS="-Og -g -ggdb -Wall -Wextra -Wformat-signedness -fstack-protector-all -DNETDATA_INTERNAL_CHECKS=1\ - -D_FORTIFY_SOURCE=2 -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --require-cloud --disable-lto +RUN CFLAGS="-Og -g -ggdb -Wall -Wextra -Wformat-signedness -DNETDATA_INTERNAL_CHECKS=1\ + -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --require-cloud --disable-lto RUN ln -sf /dev/stdout /var/log/netdata/access.log RUN ln -sf /dev/stdout /var/log/netdata/debug.log diff --git a/build_external/clean-install-arch-extras.Dockerfile b/build_external/clean-install-arch-extras.Dockerfile index 1d18f7a661..8c6f4fbaa2 100644 --- a/build_external/clean-install-arch-extras.Dockerfile +++ b/build_external/clean-install-arch-extras.Dockerfile @@ -45,8 +45,8 @@ RUN rm -rf autom4te.cache RUN rm -rf .git/ RUN find . -type f >/opt/netdata/manifest -RUN CFLAGS="-Og -g -ggdb -Wall -Wextra -Wformat-signedness -fstack-protector-all -DNETDATA_INTERNAL_CHECKS=1\ - -D_FORTIFY_SOURCE=2 -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --require-cloud --disable-lto +RUN CFLAGS="-Og -g -ggdb -Wall -Wextra -Wformat-signedness -DNETDATA_INTERNAL_CHECKS=1\ + -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --require-cloud --disable-lto RUN ln -sf /dev/stdout /var/log/netdata/access.log RUN ln -sf /dev/stdout /var/log/netdata/debug.log diff --git a/build_external/clean-install-arch.Dockerfile b/build_external/clean-install-arch.Dockerfile index 92bd2c6758..d4d0d47061 100644 --- a/build_external/clean-install-arch.Dockerfile +++ b/build_external/clean-install-arch.Dockerfile @@ -44,8 +44,8 @@ RUN rm -rf autom4te.cache RUN rm -rf .git/ RUN find . -type f >/opt/netdata/manifest -RUN CFLAGS="-O1 -ggdb -Wall -Wextra -Wformat-signedness -fstack-protector-all -DNETDATA_INTERNAL_CHECKS=1\ - -D_FORTIFY_SOURCE=2 -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --disable-lto +RUN CFLAGS="-O1 -ggdb -Wall -Wextra -Wformat-signedness -DNETDATA_INTERNAL_CHECKS=1\ + -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --disable-lto RUN ln -sf /dev/stdout /var/log/netdata/access.log RUN ln -sf /dev/stdout /var/log/netdata/debug.log diff --git a/build_external/clean-install.Dockerfile b/build_external/clean-install.Dockerfile index 18586e8974..bf63a5599e 100644 --- a/build_external/clean-install.Dockerfile +++ b/build_external/clean-install.Dockerfile @@ -26,8 +26,8 @@ RUN rm -rf autom4te.cache RUN rm -rf .git/ RUN find . -type f >/opt/netdata/manifest -RUN CFLAGS="-O1 -ggdb -Wall -Wextra -Wformat-signedness -fstack-protector-all -DNETDATA_INTERNAL_CHECKS=1\ - -D_FORTIFY_SOURCE=2 -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --disable-lto +RUN CFLAGS="-O1 -ggdb -Wall -Wextra -Wformat-signedness -DNETDATA_INTERNAL_CHECKS=1\ + -DNETDATA_VERIFY_LOCKS=1 ${EXTRA_CFLAGS}" ./netdata-installer.sh --disable-lto RUN ln -sf /dev/stdout /var/log/netdata/access.log RUN ln -sf /dev/stdout /var/log/netdata/debug.log |