leave only RELRO, Stack cookies, DEP, ASLR.
@@ -500,7 +500,7 @@ module BASE_UNIT {
when ($HARDENING == "yes") {
when ($CLANG) {
USE_LTO=yes
- CFLAGS+=-fstack-protector-all -flto -fvisibility=hidden -fsanitize=cfi -fPIE -D_FORTIFY_SOURCE=2
+ CFLAGS+=-fstack-protector-all -fPIE
LDFLAGS+=-z relro -z now -z noexecstack -pie
}
}
