Selected clang / g++ flags are based on recommendations provided by https://wiki.debian.org/Hardening.

