commit: ceeae764d33b6f9e041a0cb821a1096293880e68
Author: Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Tue Jan 18 16:53:05 2022 +0000
Commit: Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat Jan 22 22:18:55 2022 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ceeae764
flag-o-matic.eclass: allow -fstack-clash-protection, -fcf-protection=*
-fstack-clash-protection suggested by Arfrever.
Reported-by: Arfrever Frehtes Taifersar Arahesis <Arfrever <AT> Apache.Org>
Signed-off-by: Sam James <sam <AT> gentoo.org>
eclass/flag-o-matic.eclass | 2 ++
1 file changed, 2 insertions(+)
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass
index 7ac4f4a7791d..062bd04e2e0b 100644
--- a/eclass/flag-o-matic.eclass
+++ b/eclass/flag-o-matic.eclass
@@ -53,6 +53,8 @@ _setup-allowed-flags() {
# Hardening flags
'-fstack-protector*'
'-fstack-check*' -fno-stack-check
+ -fstack-clash-protection
+ '-fcf-protection=*'
-fbounds-check -fbounds-checking
-fno-PIE -fno-pie -nopie -no-pie
# Spectre mitigations, bug #646076
