From 14a26b3f90fc7ed34e5b36495baad745fe65688f Mon Sep 17 00:00:00 2001 From: Philippe Teuwen Date: Sun, 1 Mar 2026 12:42:57 +0100 Subject: [PATCH] doc --- .github/workflows/macos.yml | 2 ++ .github/workflows/ubuntu.yml | 3 ++- .github/workflows/windows.yml | 3 ++- CHANGELOG.md | 1 + doc/md/Development/Maintainers.md | 4 ++++ doc/md/Development/Makefile-vs-CMake.md | 1 + 6 files changed, 12 insertions(+), 2 deletions(-) diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 6c9dc166e..31ff0ff46 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -7,12 +7,14 @@ on: - 'docker/**' - 'traces/**' - '.vscode/**' + - '**.md' pull_request: paths-ignore: - 'doc/**' - 'docker/**' - 'traces/**' - '.vscode/**' + - '**.md' jobs: macos-make: diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml index ee88ced0f..db150ff45 100644 --- a/.github/workflows/ubuntu.yml +++ b/.github/workflows/ubuntu.yml @@ -7,13 +7,14 @@ on: - 'docker/**' - 'traces/**' - '.vscode/**' + - '**.md' pull_request: paths-ignore: - 'doc/**' - 'docker/**' - 'traces/**' - '.vscode/**' - + - '**.md' jobs: ubuntu-make: diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index c2947a265..c51f1c4e0 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -7,13 +7,14 @@ on: - 'docker/**' - 'traces/**' - '.vscode/**' + - '**.md' pull_request: paths-ignore: - 'doc/**' - 'docker/**' - 'traces/**' - '.vscode/**' - + - '**.md' jobs: proxspace: diff --git a/CHANGELOG.md b/CHANGELOG.md index 050d155b1..688a17175 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,7 @@ All notable changes to this project will be documented in this file. This project uses the changelog in accordance with [keepchangelog](http://keepachangelog.com/). Please use this to write notable changes, which is not the same as git commit log... ## [unreleased][unreleased] +- Added hardening for all host binaries. Exact level of hardening depends on the OS (@doegox) - Added `hf aliro read` command (@kormax) - Added `hf aliro info` command (@kormax) - Added Qt6 support for the client (@doegox) diff --git a/doc/md/Development/Maintainers.md b/doc/md/Development/Maintainers.md index 42230a6a9..b6010967f 100644 --- a/doc/md/Development/Maintainers.md +++ b/doc/md/Development/Maintainers.md @@ -89,6 +89,10 @@ Some unittests are available via `make check`, which is actually triggering indi * `SKIPUV=1 tools/pm3_tests.sh` to skip usage of `uv` even if `uv` is present, and force usage of `python3` (in which case you must take care of installing the script dependencies yourself) +Host binaries are compiled with hardening flags (only with Makefile, not with cmake). Exact level of hardening depends on the OS. + +* `make host NOHARDENING=1` to disable hardening flags. + `make install` is actually triggering the following individual targets which can be accessed individually: * `make client/install` diff --git a/doc/md/Development/Makefile-vs-CMake.md b/doc/md/Development/Makefile-vs-CMake.md index 73e938a60..fec820294 100644 --- a/doc/md/Development/Makefile-vs-CMake.md +++ b/doc/md/Development/Makefile-vs-CMake.md @@ -34,6 +34,7 @@ At the moment both are maintained because they don't perfectly overlap yet. | extra GCC warnings | `GCCEXTRA=1` | **no** | | | extra Clang warnings | `CLANGEXTRA=1` | **no** | only on host | | AddressSanitize | `SANITIZE=1` | **no** | only on host | +| Hardening | yes (1) | **no** | only on host; disable it with `NOHARDENING=1` | | compilation | in place | in build dir | | | user `CFLAGS`/`LDFLAGS` | envvars honored (1) | envvars honored (2) | (1) also `LDLIBS` and `INCLUDES_CLIENT` for more tuning (2) only at first cmake call | | Mingw gnu printf | `_ISOC99_SOURCE` | `_ISOC99_SOURCE` | and in cbor.h: `__attribute__((format (__MINGW_PRINTF_FORMAT, 2, 3)))`|