From fafd0b1bef84a5b21bb2038dbd1a2ed6407c7997 Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Fri, 27 Feb 2026 08:28:35 +0100 Subject: [PATCH] conmon-2.2.1-3.el10 - pass %%{optflags} and %%{build_ldflags} to enable stack protector and FORTIFY_SOURCE hardening flags - Resolves: RHEL-152224 Signed-off-by: Jindrich Novy --- conmon.spec | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/conmon.spec b/conmon.spec index 343417c..9943236 100644 --- a/conmon.spec +++ b/conmon.spec @@ -21,7 +21,7 @@ Epoch: 2 %endif Version: 2.2.1 License: Apache-2.0 -Release: 2%{?dist} +Release: 3%{?dist} Summary: OCI container runtime monitor URL: https://github.com/containers/%{name} # Tarball fetched from upstream @@ -47,7 +47,7 @@ Requires: libseccomp sed -i 's/install.bin: bin\/conmon/install.bin:/' Makefile %build -%make_build bin/conmon +%make_build bin/conmon CFLAGS="%{optflags}" LDFLAGS="%{build_ldflags}" %if %{with docs} %make_build GOMD2MAN=go-md2man -C docs @@ -70,6 +70,11 @@ sed -i 's/install.bin: bin\/conmon/install.bin:/' Makefile %endif %changelog +* Fri Feb 27 2026 Jindrich Novy - 2:2.2.1-3 +- pass %%{optflags} and %%{build_ldflags} to enable stack protector + and FORTIFY_SOURCE hardening flags +- Resolves: RHEL-152224 + * Mon Feb 16 2026 Jindrich Novy - 2:2.2.1-2 - use proper macros in spec file and simplify - Related: RHEL-111917