commit: f26b9f82a358ce22c9d77710ce785f94defa20dd
Author: Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Thu May 26 05:35:25 2022 +0000
Commit: Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Thu May 26 05:48:05 2022 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f26b9f82
sys-devel/binutils: add --enable-warn-{execstack,rwx-segments} to 9999 only
New in 2.39. This lays the groundworks for --enable-default-execstack
at some point, maybe even in 2.39 for us, but let's see how this goes first.
Signed-off-by: Sam James <sam <AT> gentoo.org>
sys-devel/binutils/binutils-9999.ebuild | 14 ++++++++++++++
1 file changed, 14 insertions(+)
diff --git a/sys-devel/binutils/binutils-9999.ebuild
b/sys-devel/binutils/binutils-9999.ebuild
index b317d8ffcd0f..8a2d54bd59b9 100644
--- a/sys-devel/binutils/binutils-9999.ebuild
+++ b/sys-devel/binutils/binutils-9999.ebuild
@@ -242,8 +242,22 @@ src_configure() {
--enable-install-libiberty
# Available from 2.35 on
--enable-textrel-check=warning
+
+ # Available from 2.39 on
+ --enable-warn-execstack
+ --enable-warn-rwx-segments
+ # TODO: Available from 2.39+ on but let's try the warning on
for a bit
+ # first... (--enable-warn-execstack)
+ # Could put it under USE=hardened?
+ #--enable-default-execstack
+
+ # Things to think about
+ #--enable-deterministic-archives
+
# Works better than vapier's patch, bug #808787
--enable-new-dtags
+
+ --disable-jansson
--disable-werror
--with-bugurl="$(toolchain-binutils_bugurl)"
--with-pkgversion="$(toolchain-binutils_pkgversion)"