From 76114fa60eae818560cb9bc83f5cb1434817888e Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Mon, 15 Nov 2021 12:32:38 +0100 Subject: [PATCH] buildflags.md: Document -mbranch-protection=standard for aarch64 --- buildflags.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/buildflags.md b/buildflags.md index c94d005..6f328d4 100644 --- a/buildflags.md +++ b/buildflags.md @@ -264,6 +264,8 @@ not), but their selection depends on the architecture: ppc64le, s390x, x86_64). * `-fcf-protection`: Instrument binaries to guard against ROP/JOP attacks. Used on i686 and x86_64. +* `-mbranch-protection=standard`: Instrument binaries to guard against + ROP/JOP attacks. Used on aarch64. * `-m64` and `-m32`: Some GCC builds support both 32-bit and 64-bit in the same compilation. For such architectures, the RPM build process explicitly selects the architecture variant by passing this compiler