[avahi/f18: 3/3] enable hardened build

Lennart Poettering lennart at fedoraproject.org
Thu Aug 9 00:06:00 UTC 2012


commit ba52e0f219f52a0073e4f103dc02b4dda49542bf
Author: Lennart Poettering <lennart at poettering.net>
Date:   Thu Aug 9 01:59:47 2012 +0200

    enable hardened build

 avahi.spec |   43 +++++++++++++++++++++++--------------------
 1 files changed, 23 insertions(+), 20 deletions(-)
---
diff --git a/avahi.spec b/avahi.spec
index 8243106..60d244b 100644
--- a/avahi.spec
+++ b/avahi.spec
@@ -8,6 +8,8 @@
 %define WITH_MONO 0
 %endif
 
+%global _hardened_build 1
+
 Name:             avahi
 Version:          0.6.31
 Release:          6%{?dist}
@@ -408,7 +410,7 @@ fashion with mDNS.
         avahi >/dev/null 2>&1 || :
 
 %post
-/usr/sbin/ldconfig >/dev/null 2>&1 || :
+/sbin/ldconfig >/dev/null 2>&1 || :
 /usr/bin/dbus-send --system --type=method_call --dest=org.freedesktop.DBus / org.freedesktop.DBus.ReloadConfig >/dev/null 2>&1 || :
 if [ "$1" -eq 1 -a -s /etc/localtime ]; then
         /usr/bin/cp -cfp /etc/localtime /etc/avahi/etc/localtime >/dev/null 2>&1 || :
@@ -419,7 +421,7 @@ fi
 %systemd_preun avahi-daemon.socket avahi-daemon.service
 
 %postun
-/usr/sbin/ldconfig >/dev/null 2>&1 || :
+/sbin/ldconfig >/dev/null 2>&1 || :
 %systemd_postun_with_restart avahi-daemon.socket avahi-daemon.service
 
 %triggerun -- avahi < 0.6.28-1
@@ -456,32 +458,32 @@ fi
 /usr/bin/systemctl --no-reload enable avahi-dnsconfd.service >/dev/null 2>&1 || :
 /usr/bin/systemctl try-restart avahi-dnsconfd.service >/dev/null 2>&1 || :
 
-%post glib -p /usr/sbin/ldconfig
-%postun glib -p /usr/sbin/ldconfig
+%post glib -p /sbin/ldconfig
+%postun glib -p /sbin/ldconfig
 
-%post compat-howl -p /usr/sbin/ldconfig
-%postun compat-howl -p /usr/sbin/ldconfig
+%post compat-howl -p /sbin/ldconfig
+%postun compat-howl -p /sbin/ldconfig
 
-%post compat-libdns_sd -p /usr/sbin/ldconfig
-%postun compat-libdns_sd -p /usr/sbin/ldconfig
+%post compat-libdns_sd -p /sbin/ldconfig
+%postun compat-libdns_sd -p /sbin/ldconfig
 
-%post libs -p /usr/sbin/ldconfig
-%postun libs -p /usr/sbin/ldconfig
+%post libs -p /sbin/ldconfig
+%postun libs -p /sbin/ldconfig
 
-%post qt3 -p /usr/sbin/ldconfig
-%postun qt3 -p /usr/sbin/ldconfig
+%post qt3 -p /sbin/ldconfig
+%postun qt3 -p /sbin/ldconfig
 
-%post qt4 -p /usr/sbin/ldconfig
-%postun qt4 -p /usr/sbin/ldconfig
+%post qt4 -p /sbin/ldconfig
+%postun qt4 -p /sbin/ldconfig
 
-%post ui -p /usr/sbin/ldconfig
-%postun ui -p /usr/sbin/ldconfig
+%post ui -p /sbin/ldconfig
+%postun ui -p /sbin/ldconfig
 
-%post ui-gtk3 -p /usr/sbin/ldconfig
-%postun ui-gtk3 -p /usr/sbin/ldconfig
+%post ui-gtk3 -p /sbin/ldconfig
+%postun ui-gtk3 -p /sbin/ldconfig
 
-%post gobject -p /usr/sbin/ldconfig
-%postun gobject -p /usr/sbin/ldconfig
+%post gobject -p /sbin/ldconfig
+%postun gobject -p /sbin/ldconfig
 
 %files -f %{name}.lang
 %doc docs/* avahi-daemon/example.service avahi-daemon/sftp-ssh.service avahi-daemon/ssh.service
@@ -646,6 +648,7 @@ fi
 * Tue Aug  7 2012 Lennart Poettering <lpoetter at redhat.com> - 0.6.31-6
 - Use new systemd macros
 - Other modernizations
+- Enable hardened build
 
 * Mon Aug 6 2012 Stef Walter <stefw at redhat.com> - 0.6.31-5
 - Don't ship ssh service by default file since openssh-server isn't


More information about the scm-commits mailing list