CFLAGS+=-fPIE -fno-strict-aliasing
CFLAGS+=-Wformat -Wformat=2 -Wconversion -Wimplicit-fallthrough
CFLAGS+=-Werror=format-security -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3
CFLAGS+=-fstack-clash-protection -fstack-protector-strong
CFLAGS+=-fstrict-flex-arrays=3

LDFLAGS+=-Wl,--sort-common,--as-needed,-z,relro,-z,now,--strip-all -pie
LDFLAGS+=-Wl,-z,nodlopen -Wl,-z,noexecstack,--no-copy-dt-needed-entries