From c26115627c856f451b58878e8dcca3d7e5d4589b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jani=20V=C3=A4limaa?= Date: Tue, 5 Dec 2023 21:52:16 +0200 Subject: rpmrc: add -fcf-protection=full to x86 default flags Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html --- NEWS | 1 + 1 file changed, 1 insertion(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 40cd263..fa9f773 100644 --- a/NEWS +++ b/NEWS @@ -1,4 +1,5 @@ - rpmrc: add -fstack-clash-protection to default flags for all supported arches +- rpmrc: add -fcf-protection=full to x86 default flags - rpmrc: add -mbranch-protection=standard to aarch64 default flags - rpmrc: drop arches we don't really support - rpmrc: drop arch_compat also available in /usr/lib/rpm/rpmrc -- cgit v1.2.1