- up to 2.1.2; add hardening flags (pie, relro etc)