Commit 451d32f
committed
fix: add hardening compiler flags in debian/rules
1. Added DEB_CFLAGS_MAINT_APPEND with -Wall for C compiler warnings
2. Added DEB_CXXFLAGS_MAINT_APPEND with -Wall for C++ compiler warnings
3. Added DEB_LDFLAGS_MAINT_APPEND with multiple security hardening
flags:
- --as-needed for linker optimization
- -z relro for RELRO protection
- -z now for immediate binding
- -z noexecstack for non-executable stacks
- -E for exporting symbols
4. These changes improve security and code quality by enabling
additional warnings and linker protections
fix: 在 debian/rules 中添加编译器加固标志
1. 为 C 编译器添加 DEB_CFLAGS_MAINT_APPEND 并启用 -Wall 警告
2. 为 C++ 编译器添加 DEB_CXXFLAGS_MAINT_APPEND 并启用 -Wall 警告
3. 为链接器添加 DEB_LDFLAGS_MAINT_APPEND 包含多个安全加固标志:
- --as-needed 用于链接器优化
- -z relro 用于 RELRO 保护
- -z now 用于立即绑定
- -z noexecstack 用于非可执行栈
- -E 用于导出符号
4. 这些更改通过启用额外的警告和链接器保护来提高安全性和代码质量1 parent 866f765 commit 451d32f
1 file changed
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
8 | 11 | | |
9 | 12 | | |
10 | 13 | | |
| |||
0 commit comments