Makepkg: use default flags

home/.config/pacman/makepkg.conf

@@ -15,14 +15,18 @@ VCSCLIENTS=('bzr::bzr'
 CARCH="x86_64"
 CHOST="x86_64-pc-linux-gnu"
 
-CPPFLAGS="-D_FORTIFY_SOURCE=2"
-#CFLAGS="-march=native -mtune=generic -O2 -pipe -fstack-protector-strong -fno-plt"
-CXXFLAGS="${CFLAGS}"
-#RUSTFLAGS="-C opt-level=3 -C target-cpu=native"
-LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"
-MAKEFLAGS="-j$(nproc)"
-DEBUG_CFLAGS="-g -fvar-tracking-assignments"
-DEBUG_CXXFLAGS="-g -fvar-tracking-assignments"
+CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions \
+        -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \
+        -fstack-clash-protection -fcf-protection \
+        -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"
+CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS"
+LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \
+         -Wl,-z,pack-relative-relocs"
+LTOFLAGS="-flto=auto"
+RUSTFLAGS="-Cforce-frame-pointers=yes"
+DEBUG_CFLAGS="-g"
+DEBUG_CXXFLAGS="$DEBUG_CFLAGS"
+DEBUG_RUSTFLAGS="-C debuginfo=2"
 
 BUILDENV=(!distcc color !ccache check !sign)