[maildrop] Do hardened builds

Bruno Wolff III bruno at fedoraproject.org
Sat May 25 16:39:00 UTC 2013


commit 3be5f4c743ef95b2ef1d063db0be8623cc74c99d
Author: Bruno Wolff III <bruno at wolff.to>
Date:   Sat May 25 11:38:08 2013 -0500

    Do hardened builds
    
    maildrop has setuid binaries and reads untrusted input.

 maildrop.spec |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/maildrop.spec b/maildrop.spec
index dd5652c..e448c0d 100644
--- a/maildrop.spec
+++ b/maildrop.spec
@@ -1,7 +1,9 @@
+%global _hardened_build 1
+
 Summary: Mail delivery agent with filtering abilities
 Name: maildrop
 Version: 2.6.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 # Exception is explicit permission to link to OpenSSL
 License: GPLv2 with exceptions
 Group: System Environment/Daemons
@@ -95,6 +97,9 @@ rm -rf %{buildroot}
 %{_mandir}/man8/*.8*
 
 %changelog
+* Sat May 25 2013 Bruno Wolff III <bruno at wolff.to> 2.6.0-2
+- Build with global hardening as maildrop has setuid binaries and reads untrusted input
+
 * Sat Mar 16 2013 Brian C. Lane <bcl at redhat.com> 2.6.0-1
 - Update to  2.6.0
 


More information about the scm-commits mailing list