[Sec 3376] Support build "hardening" flags: NetBSD

bk: 58b7af35gWtbbM_vMgbGZ_lHmMZ7iA

diff --git a/sntp/harden/netbsd7.0 b/sntp/harden/netbsd7.0
new file mode 100644 (file)
index 0000000..25cb94d
--- /dev/null
+++ b/sntp/harden/netbsd7.0
@@ -0,0 +1,4 @@
+# NetBSD-7
+NTP_HARD_CFLAGS="-fstack-protector --param ssp-buffer-size=1 -Wformat=2"
+NTP_HARD_CPPFLAGS="-D_FORTIFY_SOURCE=2"
+NTP_HARD_LDFLAGS=""

diff --git a/sntp/harden/netbsd7.99 b/sntp/harden/netbsd7.99
new file mode 100644 (file)
index 0000000..f07a716
--- /dev/null
+++ b/sntp/harden/netbsd7.99
@@ -0,0 +1,4 @@
+# NetBSD-current
+NTP_HARD_CFLAGS="-fPIE -pie -fstack-protector --param ssp-buffer-size=1 -Wformat=2"
+NTP_HARD_CPPFLAGS="-D_FORTIFY_SOURCE=2"
+NTP_HARD_LDFLAGS="-pie -shared-libgcc"