Don't inject hardening CFLAGS. We already have these by default in Gentoo. --- a/configure +++ b/configure @@ -1376,22 +1376,6 @@ if [ -n "$CRYPTO_PATH" ]; then echo " ... RSA_generate_key()$RSA found" fi -echo "Checking for secure compile option support in $CC ..." -GCCSEC="no" -LDSEC="no" -GCCSECOPT="-fstack-protector-all --param ssp-buffer-size=4 -D_FORTIFY_SOURCE=2" -echo '#include ' > $TMPC.c -echo 'int main() { printf(""); return 0; }' >> $TMPC.c -$CC -pie -fPIE $GCCSEPOPT -o $TMPC $TMPC.c > /dev/null 2> $TMPC.c.err -test -x $TMPC && GCCSEC="yes" -grep -q fPI $TMPC.c.err || GCCSECOPT="-pie -fPIE $GCCSECOPT" -rm -f "$TMPC" -$CC $GCCSECOPT -Wl,-z,now -Wl,-z,relro -o $TMPC $TMPC.c > /dev/null 2> $TMPC.c.err -test -x $TMPC && { LDSEC="yes" ; GCCSECOPT="$GCCSECOPT -Wl,-z,now -Wl,-z,relro" ; } -rm -f $TMPC $TMPC.c $TMPC.c.err -echo " Compiling... $GCCSEC" -echo " Linking... $LDSEC" - echo XDEFINES="" XLIBS=""