[tbb-bugs] #21656 [Applications/Tor Browser]: Add "low cost" hardening build flags to OS X
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Mar 6 19:17:28 UTC 2017
#21656: Add "low cost" hardening build flags to OS X
------------------------------------------+----------------------
Reporter: arthuredelstein | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID: #21448
Points: | Reviewer:
Sponsor: |
------------------------------------------+----------------------
I would propose including the following flags in our OS X clang build:
{{{
-Werror=format
-Werror=format-security
-fstack-protector-strong
-pie
-fPIE (already there)
-D_FORTIFY_SOURCE=2 -O1
-Wl,-z,relro,-z,now
}}}
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21656>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list