diff --git a/Security.asciidoc b/Security.asciidoc index 526e99e..48cdb00 100644 --- a/Security.asciidoc +++ b/Security.asciidoc @@ -30,6 +30,13 @@ All the following options enabled together: --passC:"-fPIE -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -O1 -fstack-protector-all" --passL:"-fPIE -pie -z relro -z now" ---- +Same entries for nim.cfg: +[source,ini] +---- +gcc.options.always = "-w -D_FORTIFY_SOURCE=2 -O1 -Wformat -Wformat-security -fPIE -fstack-protector-all" +gcc.options.linker = "-ldl -fPIE -pie -z relro -z now" +---- + ==== Stack protector Terminate execution when the stack is being overwritten