From ce8ea0fd5850c613b918b161159c5ccd18a43d8d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jani=20V=C3=A4limaa?= Date: Tue, 5 Dec 2023 21:39:27 +0200 Subject: macros: use -fstack-protector-strong instead of '-fstack-protector --param=ssp-buffer-size=4' in %_ssp_cflags Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html --- NEWS | 1 + 1 file changed, 1 insertion(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 45bffe3..78a5c25 100644 --- a/NEWS +++ b/NEWS @@ -2,6 +2,7 @@ - rpmrc: add -mbranch-protection=standard to aarch64 default flags - rpmrc: drop arches we don't really support - rpmrc: drop arch_compat also available in /usr/lib/rpm/rpmrc +- macros: use -fstack-protector-strong instead of '-fstack-protector --param=ssp-buffer-size=4' in %_ssp_cflags - macros: use -Wl,-z,now with -Wl,-z,relro unless _disable_ld_now is defined - mangle script shebangs -- cgit v1.2.1