Add hardening flags
Use the same hardening flags as the Debian build to enable RELRO, stack protector and hardening. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
78655e6ee0
commit
f9239e6e00
|
|
@ -116,6 +116,10 @@ RUN set -eux; \
|
||||||
--prefix="$HTTPD_PREFIX" \
|
--prefix="$HTTPD_PREFIX" \
|
||||||
--enable-mods-shared=reallyall \
|
--enable-mods-shared=reallyall \
|
||||||
--enable-mpms-shared=all \
|
--enable-mpms-shared=all \
|
||||||
|
--enable-pie \
|
||||||
|
CFLAGS="-g -O2 -fstack-protector-strong -Wformat -Werror=format-security" \
|
||||||
|
CPPFLAGS="-D_FORTIFY_SOURCE=2" \
|
||||||
|
LDFLAGS="-Wl,--as-needed -Wl,-z,relro -Wl,-z,now" \
|
||||||
; \
|
; \
|
||||||
make -j "$(nproc)"; \
|
make -j "$(nproc)"; \
|
||||||
make install; \
|
make install; \
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue