From e78913052263af80855590659fb0f705e8f13c8a Mon Sep 17 00:00:00 2001
From: Luca Barbato <lu_zero@gentoo.org>
Date: Mon, 28 Oct 2013 13:22:52 +0100
Subject: configure: Provide an hardened toolchain option

---
 configure | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'configure')

diff --git a/configure b/configure
index 34a3650188..ebd21b2108 100755
--- a/configure
+++ b/configure
@@ -2288,6 +2288,10 @@ case "$toolchain" in
         add_cflags  -fprofile-arcs -ftest-coverage
         add_ldflags -fprofile-arcs -ftest-coverage
     ;;
+    hardened)
+        add_cflags -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fno-strict-overflow -fstack-protector-all
+        add_ldflags -Wl,-z,relro -Wl,-z,now
+    ;;
     ?*)
         die "Unknown toolchain $toolchain"
     ;;
-- 
cgit v1.2.3