Where are the security flags for the compiler?

1 post / 0 new
#1 Fri, 2016-08-12 05:10
WebDev
  • WebDev's picture
  • Offline
  • Last seen: 2 months 3 weeks ago
  • Joined: 2016-04-30

Alpine packages are built as PIE binaries with stack smashing protection, according to the About page.

Where are the relevant compilation flags given to GCC? I'm looking in the abuild.conf file, but I don't see any of the flags there, no -fPIE or stack smashing flags: http://git.alpinelinux.org/cgit/abuild/tree/abuild.conf

Is there a different makefile that carries these flags? Is it invoked by default?