Re: gcc compiler flags - some room for more hardening?

onsdag 17 januari 2018 kl. 13:27:25 CET skrev  T=F3th Attila:
> I've just came accross a Fedora 28 memo about hardening their flags:
> https://fedoraproject.org/wiki/Changes/HardeningFlags28
> 1. -fstack-clash-protection
> 2. -fcf-protection=3Dfull
> 3. -mcet
> 4. for C++: -D_GLIBCXX_ASSERTIONS
>=20
> According to the builtin specs these are not in current use for
> sys-devel/gcc-7.2.
>=20
> It may worth to consider moving the same direction as Fedora. Wouldn't it
> be a shame if a regular non-rolling distro would make use of harder flags
> compared to Gentoo Hardened?
>=20
> BR: Dw.
Most of the options is for Gcc 8 or newer.
Still waiting what get add for the Spectre stuff.