4ec783f748
We RPM packaging system need to use optflags for secure building, and of course will override the flags you've defined.
However the current one is not good, we should leave it to the end of the flags queue.
[rpmaker@fab SPECS]$ rpm -E %{optflags}
-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables
66 lines
2.0 KiB
Makefile
66 lines
2.0 KiB
Makefile
INCLUDE+=-I../lib -I./ -Ioutput_modules
|
|
LDFLAGS+=-pthread
|
|
LDLIBS+=-lpcap -lgmp -lm
|
|
TARGETS=zmap
|
|
VPATH=../lib:output_modules:probe_modules
|
|
PREFIX=/usr/local
|
|
|
|
INSTALL=install
|
|
INSTALLDATA=install -m 644
|
|
mandir=/usr/share/man/man1/
|
|
bindir=$(PREFIX)/sbin
|
|
|
|
# Hardening and warnings for building with gcc
|
|
# Maybe add -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations
|
|
GCCWARNINGS = -Wall -Wformat=2 -Wno-format-nonliteral\
|
|
-pedantic -fno-strict-aliasing \
|
|
-Wextra \
|
|
-Wfloat-equal -Wundef -Wwrite-strings -Wredundant-decls \
|
|
-Wnested-externs -Wbad-function-cast -Winit-self \
|
|
-Wmissing-noreturn -Wnormalized=id \
|
|
-Wstack-protector
|
|
|
|
GCCHARDENING=-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fwrapv -fPIC --param ssp-buffer-size=1
|
|
LDHARDENING=-z relro -z now
|
|
|
|
EXTRACFLAGS=-std=gnu99 -g -O2 $(GCCHARDENING) $(GCCWARNINGS) $(EXTRA_CFLAGS) -Werror
|
|
EXTRALDFLAGS= $(LDHARDENING)
|
|
|
|
CFLAGS+=$(INCLUDE) $(EXTRACFLAGS)
|
|
LDFLAGS+=$(EXTRALDFLAGS)
|
|
|
|
modules=module_tcp_synscan.o module_icmp_echo.o module_udp.o #ADD YOUR MODULE HERE
|
|
|
|
objects=constraint.o blacklist.o cyclic.o logger.o send.o recv.o state.o monitor.o zopt_compat.o zmap.o random.o output_modules.o module_simple_file.o module_extended_file.o packet.o probe_modules.o ${modules} validate.o rijndael-alg-fst.o get_gateway.o aesrand.o
|
|
redis_objects=module_redis.o redis.o
|
|
|
|
ifeq ($(REDIS), true)
|
|
LDLIBS+=-lhiredis
|
|
objects+=$(redis_objects)
|
|
CFLAGS+=-DREDIS
|
|
endif
|
|
|
|
all: $(TARGETS)
|
|
|
|
$(TARGETS):
|
|
$(CC) $(CFLAGS) $(DFLAGS) $(LDFLAGS) $^ -o $@ $(LDLIBS)
|
|
|
|
zmap: $(objects)
|
|
|
|
zopt_compat.o: zopt.c
|
|
|
|
zopt.c zopt.h: zopt.ggo
|
|
gengetopt -C --no-help --no-version -i $^ -F $*
|
|
|
|
install: zmap
|
|
$(INSTALL) zmap $(bindir)/zmap
|
|
test -d /etc/zmap || (mkdir /etc/zmap && $(INSTALLDATA) ../conf/* /etc/zmap/)
|
|
$(INSTALLDATA) ./zmap.1 $(mandir)
|
|
@echo "\n**************\nSuccess! ZMap is installed. Try running (as root):\nzmap -p 80 -N 10 -B 1M -o -\n**************"
|
|
|
|
clean:
|
|
-rm -f $(objects) $(redis_objects) $(TARGETS)
|
|
|
|
.PHONY: install clean
|
|
|