commit:     f26b9f82a358ce22c9d77710ce785f94defa20dd
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Thu May 26 05:35:25 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Thu May 26 05:48:05 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f26b9f82

sys-devel/binutils: add --enable-warn-{execstack,rwx-segments} to 9999 only

New in 2.39. This lays the groundworks for --enable-default-execstack
at some point, maybe even in 2.39 for us, but let's see how this goes first.

Signed-off-by: Sam James <sam <AT> gentoo.org>

 sys-devel/binutils/binutils-9999.ebuild | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/sys-devel/binutils/binutils-9999.ebuild 
b/sys-devel/binutils/binutils-9999.ebuild
index b317d8ffcd0f..8a2d54bd59b9 100644
--- a/sys-devel/binutils/binutils-9999.ebuild
+++ b/sys-devel/binutils/binutils-9999.ebuild
@@ -242,8 +242,22 @@ src_configure() {
                --enable-install-libiberty
                # Available from 2.35 on
                --enable-textrel-check=warning
+
+               # Available from 2.39 on
+               --enable-warn-execstack
+               --enable-warn-rwx-segments
+               # TODO: Available from 2.39+ on but let's try the warning on 
for a bit
+               # first... (--enable-warn-execstack)
+               # Could put it under USE=hardened?
+               #--enable-default-execstack
+
+               # Things to think about
+               #--enable-deterministic-archives
+
                # Works better than vapier's patch, bug #808787
                --enable-new-dtags
+
+               --disable-jansson
                --disable-werror
                --with-bugurl="$(toolchain-binutils_bugurl)"
                --with-pkgversion="$(toolchain-binutils_pkgversion)"

Reply via email to