build: set _FORTIFY_SOURCE=2 in libselinux
Use -D_FO0RTIFY_SOURCE=2 when building libselinux and it's util library. Note that this can be overridden by setting CFLAGS during the build. Signed-off-by: William Roberts <william.c.roberts@intel.com>
This commit is contained in:
parent
4f96b323b0
commit
97edcebd1e
|
@ -64,7 +64,7 @@ ifeq ($(COMPILER), gcc)
|
||||||
EXTRA_CFLAGS = -fipa-pure-const -Wlogical-op -Wpacked-bitfield-compat -Wsync-nand \
|
EXTRA_CFLAGS = -fipa-pure-const -Wlogical-op -Wpacked-bitfield-compat -Wsync-nand \
|
||||||
-Wcoverage-mismatch -Wcpp -Wformat-contains-nul -Wnormalized=nfc -Wsuggest-attribute=const \
|
-Wcoverage-mismatch -Wcpp -Wformat-contains-nul -Wnormalized=nfc -Wsuggest-attribute=const \
|
||||||
-Wsuggest-attribute=noreturn -Wsuggest-attribute=pure -Wtrampolines -Wjump-misses-init \
|
-Wsuggest-attribute=noreturn -Wsuggest-attribute=pure -Wtrampolines -Wjump-misses-init \
|
||||||
-Wno-suggest-attribute=pure -Wno-suggest-attribute=const -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE
|
-Wno-suggest-attribute=pure -Wno-suggest-attribute=const -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2
|
||||||
else
|
else
|
||||||
EXTRA_CFLAGS = -Wunused-command-line-argument
|
EXTRA_CFLAGS = -Wunused-command-line-argument
|
||||||
endif
|
endif
|
||||||
|
|
|
@ -30,7 +30,7 @@ CFLAGS ?= -O -Wall -W -Wundef -Wformat-y2k -Wformat-security -Winit-self -Wmissi
|
||||||
-Wformat-extra-args -Wformat-zero-length -Wformat=2 -Wmultichar \
|
-Wformat-extra-args -Wformat-zero-length -Wformat=2 -Wmultichar \
|
||||||
-Woverflow -Wpointer-to-int-cast -Wpragmas \
|
-Woverflow -Wpointer-to-int-cast -Wpragmas \
|
||||||
-Wno-missing-field-initializers -Wno-sign-compare \
|
-Wno-missing-field-initializers -Wno-sign-compare \
|
||||||
-Wno-format-nonliteral -Wframe-larger-than=$(MAX_STACK_SIZE) -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE \
|
-Wno-format-nonliteral -Wframe-larger-than=$(MAX_STACK_SIZE) -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 \
|
||||||
-fstack-protector-all --param=ssp-buffer-size=4 -fexceptions \
|
-fstack-protector-all --param=ssp-buffer-size=4 -fexceptions \
|
||||||
-fasynchronous-unwind-tables -fdiagnostics-show-option -funit-at-a-time \
|
-fasynchronous-unwind-tables -fdiagnostics-show-option -funit-at-a-time \
|
||||||
-Werror -Wno-aggregate-return -Wno-redundant-decls \
|
-Werror -Wno-aggregate-return -Wno-redundant-decls \
|
||||||
|
|
Loading…
Reference in New Issue