aboutsummaryrefslogtreecommitdiffstats
path: root/rpmrc.in
diff options
context:
space:
mode:
authorJani Välimaa <wally@mageia.org>2023-12-05 21:52:16 +0200
committerJani Välimaa <wally@mageia.org>2023-12-05 21:52:16 +0200
commitc26115627c856f451b58878e8dcca3d7e5d4589b (patch)
treee5357ad0b6253805511602f29417441fb53e5dcc /rpmrc.in
parent5b2047b05ead5353c1d3ca3e8112424eb1c7aae4 (diff)
downloadrpm-setup-c26115627c856f451b58878e8dcca3d7e5d4589b.tar
rpm-setup-c26115627c856f451b58878e8dcca3d7e5d4589b.tar.gz
rpm-setup-c26115627c856f451b58878e8dcca3d7e5d4589b.tar.bz2
rpm-setup-c26115627c856f451b58878e8dcca3d7e5d4589b.tar.xz
rpm-setup-c26115627c856f451b58878e8dcca3d7e5d4589b.zip
rpmrc: add -fcf-protection=full to x86 default flags
Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html
Diffstat (limited to 'rpmrc.in')
-rw-r--r--rpmrc.in6
1 files changed, 3 insertions, 3 deletions
diff --git a/rpmrc.in b/rpmrc.in
index f0a959f..787f6c7 100644
--- a/rpmrc.in
+++ b/rpmrc.in
@@ -6,10 +6,10 @@
optflags: i386 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i386 -fasynchronous-unwind-tables -fstack-clash-protection
optflags: i486 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i486 -fasynchronous-unwind-tables -fstack-clash-protection
-optflags: i586 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection
-optflags: i686 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i686 -fasynchronous-unwind-tables -fstack-clash-protection
+optflags: i586 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full
+optflags: i686 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i686 -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full
optflags: athlon %{__common_cflags_with_ssp} -fomit-frame-pointer -march=athlon -fasynchronous-unwind-tables -fstack-clash-protection
-optflags: x86_64 %{__common_cflags_with_ssp} -fasynchronous-unwind-tables -fstack-clash-protection
+optflags: x86_64 %{__common_cflags_with_ssp} -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full
# Cortex A8
optflags: armv7 %{__common_cflags_with_ssp} -march=armv7-a -mtune=cortex-a8 -mfpu=neon -mfloat-abi=softfp -fstack-clash-protection