[scponly] Fix hardened build.

Jon Ciesla limb at fedoraproject.org
Tue May 21 16:54:29 UTC 2013


commit da091a6f6cb08c3b0398f98628fe0252a8d80221
Author: Jon Ciesla <limburgher at gmail.com>
Date:   Tue May 21 11:50:01 2013 -0500

    Fix hardened build.

 scponly.spec |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)
---
diff --git a/scponly.spec b/scponly.spec
index 9f8c4f7..7449f5e 100644
--- a/scponly.spec
+++ b/scponly.spec
@@ -2,7 +2,7 @@
 Summary: Restricted shell for ssh based file services
 Name: scponly
 Version: 4.8
-Release: 10%{?dist}
+Release: 11%{?dist}
 License: BSD
 Group: Applications/Internet
 URL: http://sublimation.org/scponly/
@@ -34,7 +34,7 @@ cp -p /usr/lib/rpm/config.{guess,sub} .
 %configure --enable-scp-compat --enable-winscp-compat --enable-chrooted-binary
 
 %{__make} %{?_smp_mflags} \
-	OPTS="%{optflags}"
+	CFLAGS="%{optflags} -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"
 
 # Remove executable bit so the debuginfo does not hae executable source files
 chmod 0644 scponly.c scponly.h helper.c
@@ -61,6 +61,9 @@ make install DESTDIR=%{buildroot}
 %config(noreplace) %{_sysconfdir}/scponly/*
 
 %changelog
+* Fri Apr 13 2012 Jon Ciesla <limburgher at gmail.com> - 4.8-11
+- Fix hardened build, BZ 965483.
+
 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 4.8-10
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
 


More information about the scm-commits mailing list