Updated build CFLAGS and LDFLAGS for PIE support similar to Debian hardening-includes

The Debian hardening-includes package sets CFLAGS and LDFLAGS as follows for PIE support:

_HARDENED_PIE_CFLAGS  := -fPIE
_HARDENED_PIE_LDFLAGS := -fPIE -pie

The configure.ac file has been updated to conform to the above.
This commit is contained in:
Michael Rash
2012-10-30 21:40:21 -04:00
parent 8c3a67377e
commit e103bdf4b0
2 changed files with 5 additions and 1 deletions

View File

@@ -49,6 +49,9 @@ fwknop-2.0.4 (11//2012):
icmp') mode.
- [client] Updated default TTL value to 64 for spoofed SPA packets. This
is closer to more OS default TTL values than the previous 255.
- Updated build CFLAGS and LDFLAGS to conform to the Debian
hardening-includes file for PIE support (e.g. '-fPIE' for CFLAGS and
'-fPIE -pie' for LDFLAGS).
fwknop-2.0.3 (09/03/2012):
- [server] Fernando Arnaboldi from IOActive found several DoS/code

View File

@@ -163,7 +163,8 @@ AC_ARG_ENABLE([pie],
[])
if test "x$use_pie" = "xyes"; then
FKO_CHECK_COMPILER_ARG([-fPIE -pie])
FKO_CHECK_COMPILER_ARG([-fPIE])
FKO_CHECK_COMPILER_ARG_LDFLAGS_ONLY([-pie])
fi
dnl Decide whether or not to enable -D_FORTIFY_SOURCE support