Using LTO with Hardened

[johnhringiv]

I'm currently using a combined profile of plasma and hardened. I'm wondering if anyone here has attempted using https://github.com/InBetweenNames/gentooLTO with a similar setup. Additionally the hardened profile uses fstack-protector-all if I wanted to switch that to fstack-protector-strong could I do that via the cflags? Thanks in advance for any assistance.

[Juippisi]

I dont think there should be problems related to that. However you will have packages that fail to build due to LTO and you will have packages that fail due to hardened flags.

As for the -fstack, I do believe "last" given instruction to gcc is the one it listens to, so yeah if you specify fstack-protector-strong in make.conf or package.env I believe it uses that. However, you can copy the hardened profile and make your own based on that :)

[johnhringiv]

Thanks for the reply! I'll be trying this out over the weekend.