summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-02-14Add wolfiHEADmainJustin Vreeland
2024-11-07group related flags -msign-return-address and -mbranch-protectionMark Esler
2024-11-07supersede -msign-return-address when -mbranch-protection is setMark Esler
2024-11-07distinguish package build flagsMark Esler
closes #6
2024-09-09Add fhardenedMark Esler
2024-05-10Update _FORTIFY_SOURCE=3 status on Arch Linuxkpcyrd
2024-01-21Yet another libcpp hardening macro shitshowjvoisin
2024-01-21Add a resourcejvoisin
2024-01-21Add a note about `-D_LIBCPP_ASSERT` and `-D_LIBCPP_ENABLE_ASSERTIONS`jvoisin
2023-12-16Chimera is using FORTIFY_SOURCE=3jvoisin
2023-12-16Ubuntu: add -D_FORTIFY_SOURCE=3 for 24.04 releaseMark Esler
Signed-off-by: Mark Esler <mark.esler@canonical.com>
2023-12-12Chrome doesn't enable BoundSanjvoisin
2023-10-29Ubuntu and Debian have some CFI nowjvoisin
2023-10-17Add Chromejvoisin
2023-10-13Gentoo: add vanilla/normal columnSam James
Gentoo has different settings to Gentoo Hardened, see https://wiki.gentoo.org/wiki/Hardened/Toolchain#Changes. Signed-off-by: Sam James <sam@gentoo.org>
2023-09-06Another date for fedorajvoisin
2023-09-05Update link for Arch Linux -D_FORTIFY_SOURCE=3kpcyrd
2023-09-05Add a date for fedorajvoisin
2023-09-05Add a date for fedorajvoisin
2023-09-05Add another sourcejvoisin
2023-09-05Add a date for Fedorajvoisin
2023-09-05Add more sourcesjvoisin
2023-09-05Add noexecstackjvoisin
2023-09-05Add an equivalent to -Wformat-securityjvoisin
2023-09-05Add some compiler/runtimes versionsjvoisin
2023-09-05Add fsanitize=boundsjvoisin
2023-09-05Add some musl libc limitationsjvoisin
2023-09-05Add more datajvoisin
2023-09-04Add more chimera stuffjvoisin
2023-09-04Sort the tablejvoisin
2023-09-04Add some hardening done by Chimerajvoisin
2023-09-04D_LIBCXX_ENABLE_ASSERTIONS isn't enabled in Alpinejvoisin
2023-09-04Clarify a bit some flags for alpinejvoisin
2023-09-04Add a date for androidjvoisin
2023-09-04Add more android stuffjvoisin
2023-09-03No -D_FORTIFY_SOURCE=3 on Androidjvoisin
2023-09-03Add android!jvoisin
2023-09-03Please github's markdown parserjvoisin
2023-09-03More "no" for fsanitize=[cfi|safe-stack]jvoisin
2023-09-03Add more "no" for fsanitize=[cfi|safe-stack]jvoisin
2023-09-03Add the superseded msign-return-address flagjvoisin
2023-09-03Alpine doesn't use -fsanitizejvoisin
2023-09-03Nobody is using ftrapvjvoisin
2023-09-03OpenBSD explicitly allows unsigned overflows, amazing.jvoisin
2023-09-03Nobody is using -mshstkjvoisin
2023-09-03Mark -D_LIBCXX_ENABLE_ASSERTIONS as superseded where applicablejvoisin
2023-09-03Remove a duplicatejvoisin
2023-09-03Add DLIBCXX_ENABLE_ASSERTIONSjvoisin
2023-09-03Add a source for Chimera's partial `-fsanitize=cfi` supportjvoisin
2023-09-03Add "partial" as an in-between yes and no.jvoisin