[cyrus-sasl] fix hardening for /usr/sbin/saslauthd
plautrba
plautrba at fedoraproject.org
Tue Sep 3 14:44:14 UTC 2013
commit b1c7d8ba9f9e1245ce27ac4020baa0dd77c6950e
Author: Petr Lautrbach <plautrba at redhat.com>
Date: Mon Sep 2 19:49:36 2013 +0200
fix hardening for /usr/sbin/saslauthd
cyrus-sasl.spec | 5 ++---
1 files changed, 2 insertions(+), 3 deletions(-)
---
diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index f102981..a26f6e2 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -187,8 +187,6 @@ chmod -x include/*.h
%patch48 -p1 -b .keytab
%build
-CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS
-
# Find Kerberos.
krb5_prefix=`krb5-config --prefix`
if test x$krb5_prefix = x%{_prefix} ; then
@@ -225,7 +223,8 @@ if test x"$LIB_DIR" != "x-L%{_libdir}"; then
LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
fi
-CFLAGS="$CFLAGS $CPPFLAGS"; export CFLAGS
+CFLAGS="$CFLAGS $CPPFLAGS -fPIE"; export CFLAGS
+LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS
echo "$CFLAGS"
echo "$CPPFLAGS"
More information about the scm-commits
mailing list