Introduce build hardening flags for f23 From: Al Stone --- generate/unix/Makefile.config | 2 ++ generate/unix/iasl/Makefile | 13 +++++++------ 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/generate/unix/Makefile.config b/generate/unix/Makefile.config index 2c67be4..e8a419e 100644 --- a/generate/unix/Makefile.config +++ b/generate/unix/Makefile.config @@ -167,6 +167,8 @@ ifneq ($(NOFORTIFY),TRUE) OPT_CFLAGS += -D_FORTIFY_SOURCE=2 endif +OPT_CFLAGS += -fPIC -pie + CFLAGS += \ -D$(HOST)\ -D_GNU_SOURCE\ diff --git a/generate/unix/iasl/Makefile b/generate/unix/iasl/Makefile index 8b71edd..b403037 100644 --- a/generate/unix/iasl/Makefile +++ b/generate/unix/iasl/Makefile @@ -309,20 +309,21 @@ $(OBJDIR)/prparserparse.c $(OBJDIR)/prparser.y.h : $(ASL_COMPILER)/prparse # Cannot use the common compile warning flags since the C files are created # by the utilities above and they are not necessarily ANSI C, etc. # +HARDENING_FLAGS = -fPIC -pie $(OBJDIR)/aslcompilerlex.o : $(OBJDIR)/aslcompilerlex.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $< $(OBJDIR)/aslcompilerparse.o : $(OBJDIR)/aslcompilerparse.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $< $(OBJDIR)/dtparserlex.o : $(OBJDIR)/dtparserlex.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $< $(OBJDIR)/dtparserparse.o : $(OBJDIR)/dtparserparse.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $< $(OBJDIR)/prparserlex.o : $(OBJDIR)/prparserlex.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $< $(OBJDIR)/prparserparse.o : $(OBJDIR)/prparserparse.c - $(CC) -c $(CFLAGS) -Wall -Werror -o$@ $< + $(CC) -c $(CFLAGS) $(HARDENING_FLAGS) -Wall -Werror -o$@ $<