Harden build flags on *nix (#946)

savchenko · web-flow · commit c82f2967624a · 2026-02-09T21:52:54.000-05:00
Following Debian best practises. Full RELRO with:
-fstack-protector-strong
-D_FORTIFY_SOURCE=2
diff --git a/src/Config.pri b/src/Config.pri
@@ -44,3 +44,8 @@ msvc {
 
 msvc:QMAKE_CXXFLAGS += /guard:cf
 msvc:QMAKE_LFLAGS += /guard:cf
+
+unix:!macx {
+    QMAKE_CXXFLAGS += -fstack-protector-strong -D_FORTIFY_SOURCE=2
+    QMAKE_LFLAGS += -Wl,-z,relro -Wl,-z,now
+}
