2e50b3850b
distros typically have their own set via C[XX]FLAGS, so make
this an optional argument
some notes on the options:
-Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=2
https://www.redhat.com/en/blog/enhance-application-security-fortifysource
(I see Fedora has recently bumped to to 3 since Jan 2024
https://fedoraproject.org/wiki/Changes/Add_FORTIFY_SOURCE%3D3_to_distribution_build_flags
but here use 2 for now instead)
-Wp,-D_GLIBCXX_ASSERTIONS
https://fedoraproject.org/wiki/Changes/HardeningFlags28
-fstack-protector-strong
(We already apply this by default)
-fstack-clash-protection
https://fedoraproject.org/wiki/Changes/HardeningFlags28
-fcf-protection
https://fedoraproject.org/wiki/Changes/HardeningFlags28
https://cgit.freedesktop.org/libreoffice/core/commit/?id=af55dc3891f7950d392175004b2090cb0e54828e
and record the compiler flags in debuginfo
-grecord-gcc-switches
Change-Id: Ib05387bad8324b188bd4ed0ee327d6a7cf83973b
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163312
Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
Reviewed-by: Andras Timar <andras.timar@collabora.com>
(cherry picked from commit 33483058f6)
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/166289
Tested-by: Jenkins
Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
71 lines
1.8 KiB
Text
71 lines
1.8 KiB
Text
--enable-hardening-flags
|
|
--enable-mpl-subset
|
|
--with-vendor=Collabora
|
|
--disable-community-flavor
|
|
#--with-branding=icon-themes/galaxy/brand_cp
|
|
--with-system-dicts
|
|
--with-myspell-dicts
|
|
--with-system-zlib
|
|
--disable-poppler
|
|
--enable-cairo-rgba
|
|
--without-system-cairo
|
|
--without-system-fontconfig
|
|
--without-system-freetype
|
|
--without-system-graphite
|
|
--without-system-harfbuzz
|
|
--without-system-openssl
|
|
--without-system-libpng
|
|
--without-system-libxml
|
|
--without-system-jpeg
|
|
--without-system-expat
|
|
--without-system-curl
|
|
--without-system-icu
|
|
--without-system-nss
|
|
--without-system-jars
|
|
--without-system-postgresql
|
|
--without-java
|
|
--without-junit
|
|
--without-help
|
|
--with-linker-hash-style=both
|
|
--with-fonts
|
|
#--enable-noto-font
|
|
--with-galleries=no
|
|
--with-theme=colibre colibre_svg
|
|
--with-external-thes-dir=/usr/share/mythes
|
|
--with-external-hyph-dir=/usr/share/hyphen
|
|
--with-external-dict-dir=/usr/share/hunspell
|
|
--disable-dbus
|
|
--enable-extension-integration
|
|
--disable-odk
|
|
--disable-kf5
|
|
--disable-gtk3
|
|
--disable-qt5
|
|
--disable-gstreamer-1-0
|
|
--disable-evolution2
|
|
--disable-gio
|
|
--disable-gui
|
|
--disable-scripting-beanshell
|
|
--disable-scripting-javascript
|
|
--disable-ext-wiki-publisher
|
|
--disable-report-builder
|
|
--disable-ext-nlpsolver
|
|
--disable-sdremote
|
|
--disable-sdremote-bluetooth
|
|
--disable-postgresql-sdbc
|
|
--disable-firebird-sdbc
|
|
--disable-randr
|
|
--disable-ext-numbertext
|
|
#--disable-ext-ct2n
|
|
--enable-epm
|
|
--enable-python=internal
|
|
--disable-online-update
|
|
--disable-dconf
|
|
--enable-mergelibs
|
|
--enable-lto
|
|
--with-package-format=deb rpm
|
|
--enable-release-build
|
|
--with-lang=ar as ast bg bn-IN br ca ca-valencia cy cs da de el en-US en-GB es et eu fi fr ga gd gl gu he hi hr hu id is it ja km kn ko lt lv ml mr nb nl nn oc or pa-IN pl pt pt-BR ro ru sk sl sr sr-Latn sv ta te tr uk vi zh-CN zh-TW
|
|
--disable-lotuswordpro
|
|
--disable-lpsolve
|
|
--enable-symbols
|
|
--enable-sal-log
|