Michael Tremer 9ea072e627 make.sh: x86_64: Enable CET full ...

-fcf-protection enables Indirect Branch Tracking, which we have recently
enabled in the kernel. We should enable this in userspace, too.

I could not find out what GCC defaults to without any value, so this
patch is explicitely enabling IBT for function returns, indirect
function calls and indirect jumps.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2023-07-26 16:08:59 +00:00

50 KiB

Executable File

Raw Blame History

View Raw