Flag	Purpose	Applicable
-D_FORTIFY_SOURCE=2	Run-time buffer overflow detection
-fasynchronous-unwind-tables	Increased reliability of backtraces
-fexceptions	Enable table-based thread cancellation
-fpie -Wl,-pie	Full ASLR for executables	7 and later (for executables)	All (for executables)
-fpic -shared	No text relocations for shared libraries
-fplugin=annobin	Generate data for hardening quality control	Future
-fstack-clash-protection	Increased reliability of stack overflow detection
-fstack-protector or -fstack-protector-all	Stack smashing protector
-fstack-protector-strong
-g	Generate debugging information
-grecord-gcc-switches	Store compiler flags in debugging information
-mcet -fcf-protection	Control flow integrity protection
-pipe	Avoid temporary files, speeding up builds
-Wall	Recommended compiler warnings
-Werror=format-security	Reject potentially unsafe format string arguents
-Werror=implicit-function-declaration	Reject missing function prototypes
-Wl,-z,defs	Detect and reject underlinking
-Wl,-z,now	Disable lazy binding
-Wl,-z,relro	Read-only segments after relocation