[dovecot/f19] make dovecot executables hardened

Michal Hlavinka mhlavink at fedoraproject.org
Mon Apr 15 10:58:45 UTC 2013


commit d464715b813989da697f24852e2d1bc632ac3446
Author: Michal Hlavinka <mhlavink at redhat.com>
Date:   Mon Apr 15 12:57:50 2013 +0200

    make dovecot executables hardened

 dovecot.spec |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)
---
diff --git a/dovecot.spec b/dovecot.spec
index 1f04570..aaa0529 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -136,8 +136,9 @@ sed -i '/DEFAULT_INCLUDES *=/s|$| '"$(pkg-config --cflags libclucene-core)|" src
 
 %build
 #required for fdpass.c line 125,190: dereferencing type-punned pointer will break strict-aliasing rules
-export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
-export LDFLAGS="-Wl,-z,now -Wl,-z,relro"
+%global _hardened_build 1
+export CFLAGS="%{__global_cflags} -fno-strict-aliasing"
+export LDFLAGS="-Wl,-z,now -Wl,-z,relro %{__global_ldflags}"
 autoreconf -I . -fiv #required for aarch64 support
 %configure                       \
     INSTALL_DATA="install -c -p -m644" \


More information about the scm-commits mailing list