This is an automated email from the ASF dual-hosted git repository.
cmcfarlen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
The following commit(s) were added to refs/heads/master by this push:
new bfef3a7a92 Add presets for debian and ubuntu with hardening flags
(#10629)
bfef3a7a92 is described below
commit bfef3a7a92988119bb0c840b87eacb5d72f34a24
Author: Chris McFarlen <ch...@mcfarlen.us>
AuthorDate: Tue Oct 17 05:49:43 2023 -0500
Add presets for debian and ubuntu with hardening flags (#10629)
---
CMakePresets.json | 20 ++++++++++++++++++++
1 file changed, 20 insertions(+)
diff --git a/CMakePresets.json b/CMakePresets.json
index af4e200519..a087cffbe1 100644
--- a/CMakePresets.json
+++ b/CMakePresets.json
@@ -48,6 +48,14 @@
"CMAKE_C_FLAGS_DEBUG": "-g -fsanitize=address,undefined"
}
},
+ {
+ "name": "hardened",
+ "hidden": true,
+ "cacheVariables": {
+ "CMAKE_CXX_FLAGS": "-D_FORTIFY_SOURCE=2 -fPIE -fstack-protector",
+ "CMAKE_EXE_LINKER_FLAGS": "-pie -Wl,-z,relro -Wl,-z,now"
+ }
+ },
{
"name": "dev-asan",
"displayName": "dev with asan",
@@ -106,6 +114,18 @@
"displayName": "CI Fedora Quiche Autest",
"description": "CI Pipeline config for Fedora Linux (autest build)",
"inherits": ["ci-fedora", "autest"]
+ },
+ {
+ "name": "ci-debian",
+ "displayName": "CI Debian Hardened Build",
+ "description": "CI Pipeline config for Debian with hardening flags",
+ "inherits": ["ci", "hardened"]
+ },
+ {
+ "name": "ci-ubuntu",
+ "displayName": "CI Ubuntu Hardened Build",
+ "description": "CI Pipeline config for Ubuntu with hardening flags",
+ "inherits": ["ci", "hardened"]
}
],
"buildPresets": [
