make sure binaries are hardened
This commit is contained in:
parent
6c210cfc01
commit
58abf451d0
@ -1,6 +1,6 @@
|
||||
Name: cyrus-imapd
|
||||
Version: 2.4.17
|
||||
Release: 2%{?dist}
|
||||
Release: 3%{?dist}
|
||||
|
||||
%define ssl_pem_file %{_sysconfdir}/pki/%{name}/%{name}.pem
|
||||
|
||||
@ -144,8 +144,10 @@ find . -type f -name "*.pl" | xargs %{__perl} -pi -e "s@/usr/local/bin/perl@%{__
|
||||
find . -type f -name "*.pl" -exec chmod 755 {} \;
|
||||
|
||||
%build
|
||||
CPPFLAGS="$RPM_OPT_FLAGS -I%{_includedir}/et -I%{_includedir}/kerberosIV -fno-strict-aliasing"; export CPPFLAGS
|
||||
CFLAGS="$RPM_OPT_FLAGS -fPIC -fno-strict-aliasing"; export CFLAGS
|
||||
%global _hardened_build 1
|
||||
|
||||
CPPFLAGS="${__global_cflags} -I%{_includedir}/et -I%{_includedir}/kerberosIV -fno-strict-aliasing"; export CPPFLAGS
|
||||
CFLAGS="%{__global_cflags} -fno-strict-aliasing"; export CFLAGS
|
||||
CCDLFLAGS="-rdynamic"; export CCDLFLAGS
|
||||
LDFLAGS="-Wl,-z,now -Wl,-z,relro"
|
||||
%ifnarch ppc ppc64
|
||||
@ -171,7 +173,7 @@ LDFLAGS="$LDFLAGS -pie"; export LDFLAGS
|
||||
|
||||
make -C man -f Makefile.dist
|
||||
make -C doc -f Makefile.dist
|
||||
make
|
||||
make LDFLAGS="$LDFLAGS -pie %{__global_ldflags}"
|
||||
make -C notifyd notifytest
|
||||
|
||||
%install
|
||||
@ -466,6 +468,9 @@ fi
|
||||
%{_mandir}/man1/*
|
||||
|
||||
%changelog
|
||||
* Thu Apr 18 2013 Michal Hlavinka <mhlavink@redhat.com> - 2.4.17-3
|
||||
- make sure binaries are hardened
|
||||
|
||||
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.17-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user