Add hardening flags
Use the same hardening flags as the Debian build to enable RELRO, stack protector and hardening. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
78655e6ee0
commit
f9239e6e00
|
|
@ -116,6 +116,10 @@ RUN set -eux; \
|
|||
--prefix="$HTTPD_PREFIX" \
|
||||
--enable-mods-shared=reallyall \
|
||||
--enable-mpms-shared=all \
|
||||
--enable-pie \
|
||||
CFLAGS="-g -O2 -fstack-protector-strong -Wformat -Werror=format-security" \
|
||||
CPPFLAGS="-D_FORTIFY_SOURCE=2" \
|
||||
LDFLAGS="-Wl,--as-needed -Wl,-z,relro -Wl,-z,now" \
|
||||
; \
|
||||
make -j "$(nproc)"; \
|
||||
make install; \
|
||||
|
|
|
|||
Loading…
Reference in New Issue