You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Leif Hedstrom (JIRA)" <ji...@apache.org> on 2015/09/23 17:14:04 UTC

[jira] [Created] (TS-3938) Add hardening (fortify) as an option to configure

Leif Hedstrom created TS-3938:
---------------------------------

             Summary: Add hardening (fortify) as an option to configure
                 Key: TS-3938
                 URL: https://issues.apache.org/jira/browse/TS-3938
             Project: Traffic Server
          Issue Type: Bug
          Components: Build
            Reporter: Leif Hedstrom


It might be useful to add an option, e.g. --with-hardening, such that we can build with various hardening compiler options. For example. I've used

{code]
CC="/opt/gcc5/bin/gcc"; export CC
CXX="/opt/gcc5/bin/g++"; export CXX
CFLAGS="-fstack-protector -fno-omit-frame-pointer"; export CFLAGS
CXXFLAGS="-fstack-protector -fno-omit-frame-pointer"; export CXXFLAGS
CPPFLAGS="-D_FORTIFY_SOURCE=2"; export CPPFLAGS
LDFLAGS="-Wl,-z,relro -Wl,-z,now"; export LDFLAGS
"./configure" \
"--enable-experimental-plugins" \
"--prefix=/opt/ats" \
"CC=/opt/gcc5/bin/gcc" \
"CXX=/opt/gcc5/bin/g++" \
"CFLAGS=-fstack-protector -fno-omit-frame-pointer" \
"CXXFLAGS=-fstack-protector -fno-omit-frame-pointer" \
"CPPFLAGS=-D_FORTIFY_SOURCE=2" \
"LDFLAGS=-Wl,-z,relro -Wl,-z,now" \
"$@"
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)