ensure we have -pie too

main
Florent Daigniere 2 years ago
parent 7ab3d8f9fe
commit 32f3241569

@ -19,9 +19,9 @@ RUN set -euxo pipefail \
&& apk add --no-cache --repository=http://dl-cdn.alpinelinux.org/alpine/edge/testing hardened-malloc && apk add --no-cache --repository=http://dl-cdn.alpinelinux.org/alpine/edge/testing hardened-malloc
ENV LD_PRELOAD=/usr/lib/libhardened_malloc.so ENV LD_PRELOAD=/usr/lib/libhardened_malloc.so
ENV CXXFLAGS="-g -O2 -fdebug-prefix-map=/app=. -fstack-protector-strong -Wformat -Werror=format-security" ENV CXXFLAGS="-g -O2 -fdebug-prefix-map=/app=. -fstack-protector-strong -Wformat -Werror=format-security -pie -fPIE"
ENV CFLAGS="-g -O2 -fdebug-prefix-map=/app=. -fstack-protector-strong -Wformat -Werror=format-security" ENV CFLAGS="-g -O2 -fdebug-prefix-map=/app=. -fstack-protector-strong -Wformat -Werror=format-security -pie -fPIE"
ENV CPPFLAGS="-Wdate-time -D_FORTIFY_SOURCE=2" ENV CPPFLAGS="-Wdate-time -D_FORTIFY_SOURCE=2 -pie -fPIE"
ENV LDFLAGS="-Wl,-z,relro" ENV LDFLAGS="-Wl,-z,relro"
WORKDIR /app WORKDIR /app

Loading…
Cancel
Save