Is there an easy way to modify the gnu-build-system so that packages are compiled with for example -fstack-protector and other flags to compiler and linker? Inspired from https://wiki.debian.org/Hardening

It would be nice with a hadened guix, perhaps even with grsecurity patches.

I would gladly help with this effort, but alas am not a lisper, yet.