From: Federico Ceratto <federico@debian.org>
Subject: Enable hardening flags, fix build

--- a/SConstruct
+++ b/SConstruct
@@ -41,8 +41,7 @@
                    LINKFLAGS=['-fsanitize=address', '-fsanitize=undefined'])
 
 
-env.Append(CFLAGS= '-Wall -std=gnu99 -Wno-unknown-pragmas '
-                   '-Wno-unknown-warning-option',
+env.Append(CFLAGS= '-Wall -std=gnu99 -Wno-unknown-pragmas ',
            CXXFLAGS='-std=gnu++11 -Wall -Wno-narrowing '
                     '-Wno-unknown-pragmas -Wno-unused-function'
         )
@@ -187,3 +186,8 @@
 )
 
 env.Program(target='goxel', source=sources)
+
+env.Append(LINKFLAGS='-z relro -z now')
+env.Append(CFLAGS='-Wformat-security -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIE -pie -Wno-class-memaccess')
+env.Append(CFLAGS='-Wno-error=format-overflow=')
+env.Append(CXXFLAGS='-Wno-error=class-memaccess')
