From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 3E43E15800F for ; Fri, 13 Jan 2023 05:54:16 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7153EE0950; Fri, 13 Jan 2023 05:54:15 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 5417DE0950 for ; Fri, 13 Jan 2023 05:54:15 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 5E095340AEC for ; Fri, 13 Jan 2023 05:54:14 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id D96177F2 for ; Fri, 13 Jan 2023 05:54:12 +0000 (UTC) From: "Sam James" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" Message-ID: <1673589227.9c142d1ca08af5ee6862cae427d8d3e60289f29a.sam@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-devel/clang-common/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-devel/clang-common/clang-common-15.0.6.9999.ebuild sys-devel/clang-common/clang-common-16.0.0.9999.ebuild X-VCS-Directories: sys-devel/clang-common/ X-VCS-Committer: sam X-VCS-Committer-Name: Sam James X-VCS-Revision: 9c142d1ca08af5ee6862cae427d8d3e60289f29a X-VCS-Branch: master Date: Fri, 13 Jan 2023 05:54:12 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 20d37fc8-e11b-46e5-90ac-c6cef85c4e6c X-Archives-Hash: 4cbd38ff0e0a8d69e4ea812b578f68c2 commit: 9c142d1ca08af5ee6862cae427d8d3e60289f29a Author: Sam James gentoo org> AuthorDate: Fri Jan 13 05:53:47 2023 +0000 Commit: Sam James gentoo org> CommitDate: Fri Jan 13 05:53:47 2023 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9c142d1c sys-devel/clang-common: add comments for USE=hardened in .cfg Signed-off-by: Sam James gentoo.org> sys-devel/clang-common/clang-common-15.0.6.9999.ebuild | 3 +++ sys-devel/clang-common/clang-common-16.0.0.9999.ebuild | 3 +++ 2 files changed, 6 insertions(+) diff --git a/sys-devel/clang-common/clang-common-15.0.6.9999.ebuild b/sys-devel/clang-common/clang-common-15.0.6.9999.ebuild index 709c93681448..0fe74d23d15c 100644 --- a/sys-devel/clang-common/clang-common-15.0.6.9999.ebuild +++ b/sys-devel/clang-common/clang-common-15.0.6.9999.ebuild @@ -91,6 +91,8 @@ src_install() { # Baseline hardening (bug #851111) newins - gentoo-hardened.cfg <<-EOF + # Some of these options are added unconditionally, regardless of + # USE=hardened, for parity with sys-devel/gcc. -fstack-clash-protection -fstack-protector-strong -fPIE @@ -113,6 +115,7 @@ src_install() { if use hardened ; then cat >> "${ED}/etc/clang/gentoo-hardened.cfg" <<-EOF || die + # Options below are conditional on USE=hardened. -D_GLIBCXX_ASSERTIONS # Analogue to GLIBCXX_ASSERTIONS diff --git a/sys-devel/clang-common/clang-common-16.0.0.9999.ebuild b/sys-devel/clang-common/clang-common-16.0.0.9999.ebuild index 1b9640fcebe0..2fdd5cbe6a13 100644 --- a/sys-devel/clang-common/clang-common-16.0.0.9999.ebuild +++ b/sys-devel/clang-common/clang-common-16.0.0.9999.ebuild @@ -91,6 +91,8 @@ src_install() { # Baseline hardening (bug #851111) newins - gentoo-hardened.cfg <<-EOF + # Some of these options are added unconditionally, regardless of + # USE=hardened, for parity with sys-devel/gcc. -fstack-clash-protection -fstack-protector-strong -fPIE @@ -113,6 +115,7 @@ src_install() { if use hardened ; then cat >> "${ED}/etc/clang/gentoo-hardened.cfg" <<-EOF || die + # Options below are conditional on USE=hardened. -D_GLIBCXX_ASSERTIONS # Analogue to GLIBCXX_ASSERTIONS