491ec650e2
- Remove CHANGES file from package Removed Features: - Disable DLZ plugins, they are not shipped with bind anymore New Features: - new 2024 KSK root key Feature Changes: - max-records-per-type and max-types-per-name improved logging when reached over their value And NSEC3 and two dig bug fixes. https://downloads.isc.org/isc/bind9/9.18.32/doc/arm/html/notes.html#notes-for-bind-9-18-32 Resolves: RHEL-48798
29 lines
739 B
Diff
29 lines
739 B
Diff
From 13348a5fc64387bf53ef450688e181100d0ceddb Mon Sep 17 00:00:00 2001
|
|
From: Petr Mensik <pemensik@redhat.com>
|
|
Date: Thu, 12 Dec 2024 15:56:13 +0100
|
|
Subject: [PATCH] Harden named service build flags
|
|
|
|
---
|
|
bin/named/Makefile.am | 5 ++++-
|
|
1 file changed, 4 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/bin/named/Makefile.am b/bin/named/Makefile.am
|
|
index 57a023b..b832e9c 100644
|
|
--- a/bin/named/Makefile.am
|
|
+++ b/bin/named/Makefile.am
|
|
@@ -33,7 +33,10 @@ endif HAVE_LIBXML2
|
|
|
|
AM_CPPFLAGS += \
|
|
-DNAMED_LOCALSTATEDIR=\"${localstatedir}\" \
|
|
- -DNAMED_SYSCONFDIR=\"${sysconfdir}\"
|
|
+ -DNAMED_SYSCONFDIR=\"${sysconfdir}\" \
|
|
+ -fpie
|
|
+
|
|
+AM_LDFLAGS += -pie -Wl,-z,relro,-z,now,-z,nodlopen,-z,noexecstack
|
|
|
|
sbin_PROGRAMS = named
|
|
|
|
--
|
|
2.47.1
|
|
|