rpms/coreutils
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add RELRO protection to su as well (#630017)

Browse Source
This commit is contained in:
Ondřej Vašík 2010-09-08 10:25:18 +02:00
parent f050d2d59c
commit c28546fac4
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
coreutils-8.4-su-pie.patch
View File

@ -5,7 +5,7 @@ diff -urNp coreutils-8.4-orig/src/Makefile.am coreutils-8.4/src/Makefile.am
# for crypt # for crypt
su_LDADD += $(LIB_CRYPT) @LIB_PAM@ su_LDADD += $(LIB_CRYPT) @LIB_PAM@
+su_LDFLAGS = -pie +su_LDFLAGS = -pie -Wl,-z,relro,-z,now
# for various ACL functions # for various ACL functions
copy_LDADD += $(LIB_ACL) copy_LDADD += $(LIB_ACL)

7
coreutils.spec
View File

@ -1,7 +1,7 @@
Summary: A set of basic GNU tools commonly used in shell scripts Summary: A set of basic GNU tools commonly used in shell scripts
Name: coreutils Name: coreutils
Version: 8.5 Version: 8.5
Release: 6%{?dist} Release: 7%{?dist}
License: GPLv3+ License: GPLv3+
Group: System Environment/Base Group: System Environment/Base
Url: http://www.gnu.org/software/coreutils/ Url: http://www.gnu.org/software/coreutils/
@ -64,7 +64,7 @@ Patch912: coreutils-overflow.patch
Patch915: coreutils-split-pam.patch Patch915: coreutils-split-pam.patch
#prevent koji build failure with wrong getfacl exit code #prevent koji build failure with wrong getfacl exit code
Patch916: coreutils-getfacl-exit-code.patch Patch916: coreutils-getfacl-exit-code.patch
#compile su with pie flag #compile su with pie flag and RELRO protection
Patch917: coreutils-8.4-su-pie.patch Patch917: coreutils-8.4-su-pie.patch
#SELINUX Patch - implements Redhat changes #SELINUX Patch - implements Redhat changes
@ -344,6 +344,9 @@ fi
%{_libdir}/coreutils %{_libdir}/coreutils
%changelog %changelog
* Wed Sep 09 2010 Ondrej Vasik <ovasik@redhat.com> - 8.5-7
- add RELRO protection to su as well (#630017)
* Mon Sep 06 2010 Ondrej Vasik <ovasik@redhat.com> - 8.5-6 * Mon Sep 06 2010 Ondrej Vasik <ovasik@redhat.com> - 8.5-6
- compile su with pie again (#630017) - compile su with pie again (#630017)