From 19d5f3d7ac4976eba767cac1685f483b1b65a2ec Mon Sep 17 00:00:00 2001 From: Federico Ceratto Date: Tue, 10 Jan 2017 20:05:14 +0000 Subject: [PATCH] Updated Security (asciidoc) --- Security.asciidoc | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Security.asciidoc b/Security.asciidoc index 526e99e..48cdb00 100644 --- a/Security.asciidoc +++ b/Security.asciidoc @@ -30,6 +30,13 @@ All the following options enabled together: --passC:"-fPIE -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -O1 -fstack-protector-all" --passL:"-fPIE -pie -z relro -z now" ---- +Same entries for nim.cfg: +[source,ini] +---- +gcc.options.always = "-w -D_FORTIFY_SOURCE=2 -O1 -Wformat -Wformat-security -fPIE -fstack-protector-all" +gcc.options.linker = "-ldl -fPIE -pie -z relro -z now" +---- + ==== Stack protector Terminate execution when the stack is being overwritten