Harden_all_packages_with_position-independent_code + guile modules

Moez Roy moez.roy at gmail.com
Fri Mar 20 05:17:15 UTC 2015


Here are 2 solutions:

-----------------

Solution 1: Keeps -z now (Full RELRO) but removes guile:

I changed the first 2 lines in the spec file to:

%global without dane
%global without guile

and the latest version builds successfully:

https://koji.fedoraproject.org/koji/taskinfo?taskID=9276305

------------------

Solution 2: Keep the guile bindings at the cost of disabling -z now:

I added the following under %build in the spec file:

CFLAGS="$RPM_OPT_FLAGS -Wl,-z,lazy"
CXXFLAGS="$RPM_OPT_FLAGS -Wl,-z,lazy"

export CFLAGS
export CXXFLAGS

and the latest version builds successfully:

https://koji.fedoraproject.org/koji/taskinfo?taskID=9276929


------------------

Regards,

Moez Roy


More information about the devel mailing list