[cyrus-sasl] fix hardening for /usr/sbin/saslauthd

plautrba plautrba at fedoraproject.org
Tue Sep 3 14:44:14 UTC 2013


commit b1c7d8ba9f9e1245ce27ac4020baa0dd77c6950e
Author: Petr Lautrbach <plautrba at redhat.com>
Date:   Mon Sep 2 19:49:36 2013 +0200

    fix hardening for /usr/sbin/saslauthd

 cyrus-sasl.spec |    5 ++---
 1 files changed, 2 insertions(+), 3 deletions(-)
---
diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index f102981..a26f6e2 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -187,8 +187,6 @@ chmod -x include/*.h
 %patch48 -p1 -b .keytab
 
 %build
-CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS
-
 # Find Kerberos.
 krb5_prefix=`krb5-config --prefix`
 if test x$krb5_prefix = x%{_prefix} ; then
@@ -225,7 +223,8 @@ if test x"$LIB_DIR" != "x-L%{_libdir}"; then
         LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
 fi
 
-CFLAGS="$CFLAGS $CPPFLAGS"; export CFLAGS
+CFLAGS="$CFLAGS $CPPFLAGS -fPIE"; export CFLAGS
+LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS
 
 echo "$CFLAGS"
 echo "$CPPFLAGS"


More information about the scm-commits mailing list