From: Harlan Stenn <stenn@ntp.org>
Date: Thu, 2 Mar 2017 05:35:49 +0000 (+0000)
Subject: [Sec 3376] Support build "hardening" flags: NetBSD
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b351a029d2d76d60064dd22e6b5e9da74038fa90;p=thirdparty%2Fntp.git

[Sec 3376] Support build "hardening" flags: NetBSD

bk: 58b7af35gWtbbM_vMgbGZ_lHmMZ7iA
---

diff --git a/sntp/harden/netbsd7.0 b/sntp/harden/netbsd7.0
new file mode 100644
index 000000000..25cb94d62
--- /dev/null
+++ b/sntp/harden/netbsd7.0
@@ -0,0 +1,4 @@
+# NetBSD-7
+NTP_HARD_CFLAGS="-fstack-protector --param ssp-buffer-size=1 -Wformat=2"
+NTP_HARD_CPPFLAGS="-D_FORTIFY_SOURCE=2"
+NTP_HARD_LDFLAGS=""
diff --git a/sntp/harden/netbsd7.99 b/sntp/harden/netbsd7.99
new file mode 100644
index 000000000..f07a7169e
--- /dev/null
+++ b/sntp/harden/netbsd7.99
@@ -0,0 +1,4 @@
+# NetBSD-current
+NTP_HARD_CFLAGS="-fPIE -pie -fstack-protector --param ssp-buffer-size=1 -Wformat=2"
+NTP_HARD_CPPFLAGS="-D_FORTIFY_SOURCE=2"
+NTP_HARD_LDFLAGS="-pie -shared-libgcc"