build: Check for IBT and SHSTK properties in .note.gnu.property section

hebasto · Aug 21, 2024 · 1d97b53 · 1d97b53
1 parent 9b641b7
commit 1d97b53
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/configure.ac b/configure.ac
@@ -851,6 +851,11 @@ if test "$use_hardening" != "no"; then
   AX_CHECK_COMPILE_FLAG([-fcf-protection=full], [
     HARDENED_CXXFLAGS="$HARDENED_CXXFLAGS -fcf-protection=full"
     HARDENED_CFLAGS="$HARDENED_CFLAGS -fcf-protection=full"
+    case $host in
+      *x86_64*linux*)
+        HARDENED_LDFLAGS="$HARDENED_LDFLAGS -Wl,-z,cet-report=error"
+      ;;
+    esac
   ])
 
   case $host in