Compile Centos package with security options GCC

Support for security such as Firewalls and securing linux
Post Reply
bryn1u
Posts: 40
Joined: 2010/04/09 15:38:07
Contact:

Compile Centos package with security options GCC

Post by bryn1u » 2017/03/15 10:29:55

Hello guys,

Im reading and wondering how can i compile centos package wits ssp, wl, rerlo, z, pie flags ? Or how can i know which flags are avilable to use to compile ?

User avatar
remirepo
Posts: 447
Joined: 2014/09/21 09:07:12
Location: France
Contact:

Re: Compile Centos package with security options GCC

Post by remirepo » 2017/03/15 11:24:03

Building packages, using the %configure macro should bring proper options.

Defining should pull more security options

Code: Select all

%global _hardened_build 1
Remi's Repository - Forum - Blog

bryn1u
Posts: 40
Joined: 2010/04/09 15:38:07
Contact:

Re: Compile Centos package with security options GCC

Post by bryn1u » 2017/03/15 11:32:44

Thank u Remi.

But what if i want to compile from sources but not to provide of centos repository. For example i want to compile from official sites ? Is there any way to set flags in make.conf or others config. I can find any infromation about it.

User avatar
remirepo
Posts: 447
Joined: 2014/09/21 09:07:12
Location: France
Contact:

Re: Compile Centos package with security options GCC

Post by remirepo » 2017/03/15 11:44:03

You initial question was about "Compile Centos package"

So my answer.

I never build from sources, so can't help more.
And building from sources is never recommended here.
Remi's Repository - Forum - Blog

User avatar
TrevorH
Site Admin
Posts: 33221
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Compile Centos package with security options GCC

Post by TrevorH » 2017/03/15 13:40:58

And as far as CentOS is concerned "official sites" have .centos.org in their domain names...
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply