configure: Provide an hardened toolchain option

1 files changed, 4 insertions, 0 deletions

diff --git a/configure b/configure
index 34a3650188..ebd21b2108 100755
--- a/configure
+++ b/configure
@@ -2288,6 +2288,10 @@ case "$toolchain" in
         add_cflags  -fprofile-arcs -ftest-coverage
         add_ldflags -fprofile-arcs -ftest-coverage
     ;;
+    hardened)
+        add_cflags -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fno-strict-overflow -fstack-protector-all
+        add_ldflags -Wl,-z,relro -Wl,-z,now
+    ;;
     ?*)
         die "Unknown toolchain $toolchain"
     ;;