_FORTIFY_SOURCE=2 appears to be the default for package building on many
Linux distributions now, as part of harding or security options. But we
often hear about problems related to this only when we hand the source
over to the packagers. So I think we might as well add this to our
standard compilation options, for example in src/include/port/linux.h.
What do you think?