Backup_Repos/pentoo-overlay
1
0
Fork 0
mirror of https://github.com/pentoo/pentoo-overlay synced 2026-05-08 20:43:38 +02:00
Code Issues Projects Releases Wiki Activity

profile: update fhardened flags to match default, remove unneeded nerf

Browse source
This commit is contained in:
Rick Farina (Zero_Chaos) 2025-02-28 12:03:43 -05:00
parent 6434736260
commit 410515636e
No known key found for this signature in database
GPG key ID: A29433C0AA431DDC
2 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
profiles/pentoo/base/make.defaults
View file

@ -11,7 +11,8 @@ LDFLAGS="${LDFLAGS} -Wl,--defsym=__gentoo_check_ldflags__=0"
SPEEDFLAGS="-O3 -flto"
WARNINGFLAGS="-frecord-gcc-switches -Wstringop-overread -Wformat -Wformat-security"
#adapted from gcc14 -fhardened without "-fPIE -pie"
SECURITYFLAGS="-D_FORTIFY_SOURCE=3 -D_GLIBCXX_ASSERTIONS -ftrivial-auto-var-init=pattern -Wl,-z,relro,-z,now -fstack-protector-strong -fstack-clash-protection -fcf-protection=full"
SECURITYFLAGS="-D_FORTIFY_SOURCE=3 -D_GLIBCXX_ASSERTIONS -ftrivial-auto-var-init=zero -Wl,-z,relro,-z,now -fstack-protector-strong -fstack-clash-protection -fcf-protection=full"
CFLAGS="${CFLAGS} -pipe ${SPEEDFLAGS} ${WARNINGFLAGS} ${SECURITYFLAGS}"
CXXFLAGS="${CXXFLAGS} -pipe ${SPEEDFLAGS} ${WARNINGFLAGS} ${SECURITYFLAGS}"
FFLAGS="${FFLAGS} -pipe ${SPEEDFLAGS} ${WARNINGFLAGS} ${SECURITYFLAGS}"

5
profiles/pentoo/base/profile.bashrc
View file

@ -29,11 +29,6 @@ if [[ $CATEGORY/$PN == dev-lang/rust ]]; then
CFLAGS=${CFLAGS/-ggdb/} CXXFLAGS=${CXXFLAGS/-ggdb/}
fi
#sorry, unimplemented: __builtin_clear_padding not supported for variable length aggregates
if [[ ${CATEGORY}/${PN} == app-crypt/johntheripper-jumbo ]]; then
export CFLAGS="${CFLAGS/-ftrivial-auto-var-init=pattern/}"
fi
#some packages break on LTO and should all have bugs
if [[ ${CATEGORY}/${PN} == app-crypt/mit-krb5 ]]; then
export CFLAGS="${CFLAGS/-flto/}"