|
|
|
@ -10,20 +10,26 @@ ifeq ($(UNAME_SYS), Linux)
|
|
|
|
|
-fno-strict-aliasing
|
|
|
|
|
XMPPIPE_SANDBOX ?= seccomp
|
|
|
|
|
XMPPIPE_SANDBOX_RLIMIT_NOFILE ?= 0
|
|
|
|
|
LDFLAGS ?= -Wl,-z,relro,-z,now
|
|
|
|
|
else ifeq ($(UNAME_SYS), FreeBSD)
|
|
|
|
|
CFLAGS ?= -DHAVE_STRTONUM \
|
|
|
|
|
-D_FORTIFY_SOURCE=2 -O2 -fstack-protector-strong \
|
|
|
|
|
-Wformat -Werror=format-security \
|
|
|
|
|
-fno-strict-aliasing
|
|
|
|
|
XMPPIPE_SANDBOX ?= capsicum
|
|
|
|
|
LDFLAGS ?= -Wl,-z,relro,-z,now
|
|
|
|
|
else ifeq ($(UNAME_SYS), OpenBSD)
|
|
|
|
|
CFLAGS ?= -DHAVE_STRTONUM \
|
|
|
|
|
-D_FORTIFY_SOURCE=2 -O2 -fstack-protector-strong \
|
|
|
|
|
-Wformat -Werror=format-security \
|
|
|
|
|
-fno-strict-aliasing
|
|
|
|
|
XMPPIPE_SANDBOX ?= pledge
|
|
|
|
|
LDFLAGS ?= -Wl,-z,relro,-z,now
|
|
|
|
|
else ifeq ($(UNAME_SYS), SunOS)
|
|
|
|
|
else ifeq ($(UNAME_SYS), Darwin)
|
|
|
|
|
CFLAGS ?= -D_FORTIFY_SOURCE=2 -O2 -fstack-protector-strong \
|
|
|
|
|
-Wformat -Werror=format-security \
|
|
|
|
|
-fno-strict-aliasing
|
|
|
|
|
endif
|
|
|
|
|
|
|
|
|
|
XMPPIPE_SANDBOX ?= rlimit
|
|
|
|
@ -36,7 +42,6 @@ CFLAGS += $(XMPPIPE_CFLAGS) \
|
|
|
|
|
-DXMPPIPE_SANDBOX_$(XMPPIPE_SANDBOX) \
|
|
|
|
|
-DXMPPIPE_SANDBOX_RLIMIT_NOFILE=$(XMPPIPE_SANDBOX_RLIMIT_NOFILE)
|
|
|
|
|
|
|
|
|
|
XMPPIPE_LDFLAGS ?= -Wl,-z,relro,-z,now
|
|
|
|
|
LDFLAGS += $(XMPPIPE_LDFLAGS)
|
|
|
|
|
|
|
|
|
|
all: $(PROG)
|
|
|
|
|