diff options
| author | Austin S. Hemmelgarn <austin@netdata.cloud> | 2023-06-28 07:55:45 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-06-28 07:55:45 -0400 |
| commit | bb2135702b0ef443c617cceadec7b8422360035f (patch) | |
| tree | c28e6d4584e2c764ea39be9ff3d190dd6cf6db64 /packaging/makeself | |
| parent | 625b929e7ada4b64bb28bfa5b7cc6147f83de8ed (diff) | |
Add hardening options to CFLAGS by default if they are available. (#15087)
* Enable SSP if available.
* Add control flow protection options.
* Add -D_FORTIFY_SOURCE option if supported.
* Add stack-clash-protection option if supported.
* Further build flags cleanup.
Diffstat (limited to 'packaging/makeself')
| -rwxr-xr-x | packaging/makeself/jobs/70-netdata-git.install.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/packaging/makeself/jobs/70-netdata-git.install.sh b/packaging/makeself/jobs/70-netdata-git.install.sh index 2448a0c2b9..3c3d44515f 100755 --- a/packaging/makeself/jobs/70-netdata-git.install.sh +++ b/packaging/makeself/jobs/70-netdata-git.install.sh @@ -9,7 +9,7 @@ cd "${NETDATA_SOURCE_PATH}" || exit 1 if [ "${NETDATA_BUILD_WITH_DEBUG}" -eq 0 ]; then export CFLAGS="-static -O2 -I/openssl-static/include -I/libnetfilter-acct-static/include/libnetfilter_acct -I/usr/include/libmnl -pipe" else - export CFLAGS="-static -O1 -pipe -ggdb -Wall -Wextra -Wformat-signedness -fstack-protector-all -D_FORTIFY_SOURCE=2 -DNETDATA_INTERNAL_CHECKS=1 -I/openssl-static/include -I/libnetfilter-acct-static/include/libnetfilter_acct -I/usr/include/libmnl" + export CFLAGS="-static -O1 -pipe -ggdb -Wall -Wextra -Wformat-signedness -DNETDATA_INTERNAL_CHECKS=1 -I/openssl-static/include -I/libnetfilter-acct-static/include/libnetfilter_acct -I/usr/include/libmnl" fi export LDFLAGS="-static -L/openssl-static/lib -L/libnetfilter-acct-static/lib -lnetfilter_acct -L/usr/lib -lmnl" |