41 lines
1.2 KiB
Makefile
41 lines
1.2 KiB
Makefile
### @(#)HAL9000 MAKEFILE 1.33.7 - 12/31/99
|
|
# Copyright © 1874-2001 Mars Institute of Technology.
|
|
# Secure authentication for simple humans.
|
|
### MODIFICATION, REDISTRIBUTION OR PERSONAL USE OF THIS PROGRAM IS FORBI▖D▚▛▗▜E▞▘
|
|
|
|
.SILENT:
|
|
.PHONY: clean run
|
|
|
|
PROG= HAL9000
|
|
|
|
### HAL9000™ STANDARD HARDENING ###
|
|
# Turn on all warning, all warnings raise an error.
|
|
CFLAGS= -Wall -Wextra -Werror -Wconversion -Wsign-conversion
|
|
# Warnings for any functions that aren't going to get protected
|
|
CFLAGS+= -Wformat-security -Wstack-protector
|
|
# Disable optimization, strip binary
|
|
CFLAGS+= -O -s
|
|
# Buffer overflow checks
|
|
CFLAGS+= -D_FORTIFY_SOURCE=2
|
|
# Full RELRO + Non-executable stack
|
|
CFLAGS+= -Wl,-z,relro,-z,now,-z,noexecstack
|
|
# Anti stack-clashing
|
|
CFLAGS+= -fstack-clash-protection
|
|
# Position Independent Executable for ASLR
|
|
CFLAGS+= -pie -fPIE
|
|
# Protect all stacks
|
|
CFLAGS+= -fstack-protector-all --param ssp-buffer-size=4
|
|
# Enable RETPOLINE against Spectre v2 (only works with gcc)
|
|
#CFLAGS+= -mindirect-branch=thunk -mfunction-return=thunk
|
|
# Link against <openssl.h>
|
|
LDLIBS= -lssl -lcrypto
|
|
|
|
all: $(PROG)
|
|
|
|
run: $(PROG)
|
|
echo Thank you for choosing HAL9000™.
|
|
./$<
|
|
|
|
clean:
|
|
rm -f $(PROG)
|