diff options
| author | amy <[email protected]> | 2026-01-13 15:30:22 -0600 |
|---|---|---|
| committer | GitHub <[email protected]> | 2026-01-13 15:30:22 -0600 |
| commit | 63b82fca3b5424e3c4731241cc4d7859ce4b8f7f (patch) | |
| tree | 498a48d3accd5321b3dfd76d3aa2e0e1ccd40a13 /makefile | |
| parent | 886385c2c406cd2743f1515ac0fea3903d3f0390 (diff) | |
| parent | 1c6bbd9c688d51bc8883eea05319d50a592204d3 (diff) | |
Merge pull request #7 from basicallygit/main
Add extra hardening
Diffstat (limited to 'makefile')
| -rw-r--r-- | makefile | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -12,6 +12,8 @@ endif CFLAGS := -D_GNU_SOURCE -Wall -fPIC -DGIT_COMMIT='$(GIT_COMMIT)' -DMAJOR_VERSION='$(MAJOR_VERSION)' `pkg-config --cflags lua$(version)`
LFLAGS := -lm -shared -lcrypto -lssl
+HARDENING_CFLAGS := -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fstack-clash-protection
+HARDENING_LFLAGS := -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack
LINKER := $(CC)
TARGET := lullaby.so
@@ -34,6 +36,13 @@ all: $(TARGET) release: CFLAGS += -O3
release: all
+hardened: CFLAGS += -O2
+ifneq ($(OS),Windows_NT)
+hardened: CFLAGS += $(HARDENING_CFLAGS)
+hardened: LFLAGS += $(HARDENING_LFLAGS)
+endif
+hardened: all
+
.PHONY: install
install::
mkdir $(INSTALL)$(install_version) -p
|