diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2023-04-16 19:57:02 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2023-04-16 19:57:02 +0000 |
| commit | 2bed02556d80a01dbfa810a526e8d17b9076bd9f (patch) | |
| tree | 5da46f1c8f7a1a9ea0727ebfb0164b997c872813 /distrib/special | |
| parent | 9cb0de26812ff690fb044304cc52103961957921 (diff) | |
if (actually... when) the compiler is flipped to do BTI/ENDBR by default,
the install media would grow too much, so use the same strategy as we
for stack protector and other things: disable them, just on the install
media
ok kettenis
Diffstat (limited to 'distrib/special')
| -rw-r--r-- | distrib/special/Makefile.inc | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/distrib/special/Makefile.inc b/distrib/special/Makefile.inc index bc3c3ab6a96..99547e82a67 100644 --- a/distrib/special/Makefile.inc +++ b/distrib/special/Makefile.inc @@ -2,6 +2,14 @@ COPTS+=-Oz -fno-stack-protector COPTS+=-fno-unwind-tables -fno-asynchronous-unwind-tables + +.if ${MACHINE} == "amd64" +COPTS+=-fcf-protection=none +.endif +.if ${MACHINE} == "arm64" +COPTS+=-mbranch-protection=none +.endif + MAN= LDSTATIC=-static NOPIE= |