Better compilation flags

This includes some hardening flags

Author: DemiMarie

shmoverride/Makefile

@@ -28,16 +28,18 @@ endif
 
 LIBDIR ?= /usr/lib64
 extra_cflags := -g -O2 -I../include/ -fPIC -Wall -Wextra -Werror \
-		-DBACKEND_VMM_$(BACKEND_VMM) \
-		-DSHMOVERRIDE_LIB_PATH=\"$(LIBDIR)/qubes-gui-daemon/shmoverride.so\" \
-		-I../include -fvisibility=hidden -pthread
+		-Wp,-DBACKEND_VMM_$(BACKEND_VMM) \
+		-Wp,-DSHMOVERRIDE_LIB_PATH=\"$(LIBDIR)/qubes-gui-daemon/shmoverride.so\" \
+		-I../include -fvisibility=hidden -pthread \
+		-Wp,-D_GNU_SOURCE=1 -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-all \
+		-fcf-protection -fstack-clash-protection -Wl,-Bsymbolic
 CC=gcc
 
 all: shmoverride.so X-wrapper-qubes
 
 shmoverride.so: shmoverride.o ./list.o
 	$(CC) $(CFLAGS) $(extra_cflags) -shared -o shmoverride.so \
-		shmoverride.o list.o -ldl -lxenctrl -lxengnttab -Wl,-Bsymbolic
+		shmoverride.o list.o -ldl -lxenctrl -lxengnttab
 
 vpath %.c ../common