DevHeads.net

Fedora c++ default build flags

Hi,
during a discussion with upstream (MongoDB) they asked me about default
Fedora C/C++ build flags. And I don't remember all Fedora System Wide
changes where it was introduced,... so is there some place where it's
described?

Main upstream question was:
"""
I don't know what is in those various hardening scripts, so hard to say
what they do. I am somewhat interested in whether you think we should
be applying these flags for our hardened builds. Do you have some
guidance on the runtime costs?

-fstack-clash-protection
-D_GLIBCXX_ASSERTIONS
-fcf-protection

I'm also curious about why you are applying -fexceptions and
-fasynchronous-unwind-tables. The first seems unnecessary for a C++
project, and the second seems potentially interesting, if you have some
context on why it is applied.
"""

So some link or explanation in this thread (which I can link to
upstream) would be really helpful.

Thanks,
Marek

(link to upstream issue - <a href="https://jira.mongodb.org/browse/SERVER-35935" title="https://jira.mongodb.org/browse/SERVER-35935">https://jira.mongodb.org/browse/SERVER-35935</a>)

Comments

Re: Fedora c++ default build flags

By Dan =?ISO-8859-... at 07/11/2018 - 08:12

On Wed, 11 Jul 2018 14:00:40 +0200

<a href="https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md" title="https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md">https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/build...</a>

Dan