[KUDU-2644] Use security hardening flags and other techniques for Kudu components

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: CLI, client, master, tserver
• Labels: build security
• Assignee: Unassigned
• Reporter: Alexey Serbin
• Created: 18/Dec/18 02:41
• Updated: 03/Jun/20 13:07

Description

It would be nice to turn on various security-related hardening flags for the compiler and the linker while building various Kudu components. The nice overview of available options is at:
https://blog.erratasec.com/2018/12/notes-on-build-hardening.html

Maybe, we could turn on all that for the DEBUG builds, and enable at least some of those that don't hurt performance too much for RELEASE builds after initial evaluation.

Issue Links

• is related to: KUDU-2002 It would be nice to have Kudu-specific harness for OSS-Fuzz