> I have to disable those GBS flags globally to resolve the nacl code issue, any good idea for that?
> And what the JIRA about? To ask GBS remove those flags by default?

For now, let's go with the code as is. The JIRA ticket would be to investigate a better solution for this problem, as this change makes everything be built without those security options, not only the NaCl bootstrap code.