Skip to content

Conversation

@18202781743
Copy link
Contributor

  1. Added security hardening compiler flags to debian/rules
  2. Enabled stack protection with -fstack-protector-all
  3. Added RELRO, NOW, and noexecstack linker flags
  4. Included additional warning flags (-Wall) for stricter compilation
  5. These changes improve binary security against common exploits

feat: 添加安全加固编译参数

  1. 在 debian/rules 中添加安全加固编译参数
  2. 使用 -fstack-protector-all 启用栈保护
  3. 添加 RELRO、NOW 和 noexecstack 链接器标志
  4. 包含额外的警告标志 (-Wall) 用于更严格的编译
  5. 这些更改提高了二进制文件对常见漏洞的防护能力

@18202781743 18202781743 requested review from BLumia and mhduiy July 3, 2025 08:07
1. Added security hardening compiler flags to debian/rules
2. Enabled stack protection with -fstack-protector-all
3. Added RELRO, NOW, and noexecstack linker flags
4. Included additional warning flags (-Wall) for stricter compilation
5. These changes improve binary security against common exploits

feat: 添加安全加固编译参数

1. 在 debian/rules 中添加安全加固编译参数
2. 使用 -fstack-protector-all 启用栈保护
3. 添加 RELRO、NOW 和 noexecstack 链接器标志
4. 包含额外的警告标志 (-Wall) 用于更严格的编译
5. 这些更改提高了二进制文件对常见漏洞的防护能力
@deepin-ci-robot
Copy link
Contributor

deepin pr auto review

关键摘要:

  • debian/rules文件中添加了安全编译参数,这是一个好的做法,有助于提高软件的安全性。

是否建议立即修改:

  • 否,当前提交的代码没有明显的语法或逻辑错误。
  • 是,建议进一步检查是否有其他相关的安全编译参数需要添加,以确保软件的安全性得到全面保障。
  • 是,建议在debian/rules文件中添加注释,说明每个编译参数的用途,以便其他开发者理解这些设置的目的。

@deepin-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: 18202781743, mhduiy

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@18202781743 18202781743 merged commit a11312a into linuxdeepin:master Jul 3, 2025
17 of 18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants