openbsd/freebsd: cc hardening flags

7 years ago · 3e9f34f1fb
parent e98a6b24fa
commit 3e9f34f1fb
1 changed files with 2 additions and 0 deletions
--- a/2
+++ b/2
@ -10,9 +10,11 @@ ifeq ($(UNAME_SYS), Linux)
 	XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_SECCOMP
 	XMPPIPE_SANDBOX_RLIMIT_NOFILE ?= 0
 else ifeq ($(UNAME_SYS), FreeBSD)
+	CFLAGS ?= -D_FORTIFY_SOURCE=2 -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -fno-strict-aliasing
 	XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_CAPSICUM
 else ifeq ($(UNAME_SYS), OpenBSD)
 	XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_PLEDGE
+	CFLAGS ?= -D_FORTIFY_SOURCE=2 -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -fno-strict-aliasing
 else ifeq ($(UNAME_SYS), SunOS)
 	LDFLAGS += -luuid -lresolv
 else ifeq ($(UNAME_SYS), Darwin)