Commit 9d55dbc
fix: add hardening build flags to debian/rules
Added several security hardening build flags to the Debian package build
configuration:
1. Set DEB_BUILD_MAINT_OPTIONS to enable all hardening features
2. Added -Wall warning flag for both C and C++ compilers
3. Added linker flags for security features including RELRO, immediate
binding, noexecstack, and export dynamic
These changes improve the security of the resulting binary by enabling
various compiler and linker protections against common exploitation
techniques
fix: 在 debian/rules 中添加安全加固构建标志
在 Debian 软件包构建配置中添加了多个安全加固构建标志:
1. 设置 DEB_BUILD_MAINT_OPTIONS 以启用所有加固功能
2. 为 C 和 C++ 编译器添加 -Wall 警告标志
3. 添加链接器标志以实现安全功能,包括 RELRO、立即绑定、noexecstack 和导
出动态
这些更改通过启用各种编译器和链接器保护来防止常见利用技术,从而提高生成二
进制文件的安全性1 parent c1dffe8 commit 9d55dbc
1 file changed
Lines changed: 4 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
5 | 9 | | |
6 | 10 | | |
7 | 11 | | |
| |||
0 commit comments