From c2eece285ddbc33054d4b466ab09c976d60622c3 Mon Sep 17 00:00:00 2001
From: Pierre Pronchery <khorben@defora.org>
Date: Thu, 19 Nov 2020 00:36:59 +0100
Subject: [PATCH] Build strace(1) with security mitigations

This enables PIE with SSP, FORTIFY, and RELRO by default.
---
 src/project.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/project.conf b/src/project.conf
index b5ad9d0..073d5ac 100644
--- a/src/project.conf
+++ b/src/project.conf
@@ -1,6 +1,7 @@
 targets=strace
 cflags_force=-W
-cflags=-Wall -g -O2 -pedantic
+cflags=-Wall -g -O2 -fPIE -D_FORTIFY_SOURCE=2 -fstack-protector
+ldflags=-pie -Wl,-z,relro -Wl,-z,now
 dist=Makefile,platform.h,platform/freebsd.h,platform/linux.h,platform/netbsd.h,strace.h
 
 [strace]