From 1c6bbd9c688d51bc8883eea05319d50a592204d3 Mon Sep 17 00:00:00 2001
From: basicallygit <91993321+basicallygit@users.noreply.github.com>
Date: Tue, 23 Dec 2025 16:28:13 +0000
Subject: Add make hardened with hardened compiler flags

---
 makefile | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/makefile b/makefile
index 2dcdf4c..9988d03 100644
--- a/makefile
+++ b/makefile
@@ -12,6 +12,8 @@ endif
 
 CFLAGS := -D_GNU_SOURCE -Wall -fPIC -DGIT_COMMIT='$(GIT_COMMIT)' -DMAJOR_VERSION='$(MAJOR_VERSION)' `pkg-config --cflags lua$(version)`
 LFLAGS := -lm -shared -lcrypto -lssl
+HARDENING_CFLAGS := -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fstack-clash-protection
+HARDENING_LFLAGS := -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack
 LINKER := $(CC)
 
 TARGET := lullaby.so
@@ -34,6 +36,13 @@ all: $(TARGET)
 release: CFLAGS += -O3
 release: all
 
+hardened: CFLAGS += -O2
+ifneq ($(OS),Windows_NT)
+hardened: CFLAGS += $(HARDENING_CFLAGS)
+hardened: LFLAGS += $(HARDENING_LFLAGS)
+endif
+hardened: all
+
 .PHONY: install
 install::
 	mkdir $(INSTALL)$(install_version) -p
-- 
cgit v1.2.3