make sure binaries are hardened

This commit is contained in:
Michal Hlavinka 2013-04-18 15:02:54 +02:00
parent 6c210cfc01
commit 58abf451d0

View File

@ -1,6 +1,6 @@
Name: cyrus-imapd
Version: 2.4.17
Release: 2%{?dist}
Release: 3%{?dist}
%define ssl_pem_file %{_sysconfdir}/pki/%{name}/%{name}.pem
@ -144,8 +144,10 @@ find . -type f -name "*.pl" | xargs %{__perl} -pi -e "s@/usr/local/bin/perl@%{__
find . -type f -name "*.pl" -exec chmod 755 {} \;
%build
CPPFLAGS="$RPM_OPT_FLAGS -I%{_includedir}/et -I%{_includedir}/kerberosIV -fno-strict-aliasing"; export CPPFLAGS
CFLAGS="$RPM_OPT_FLAGS -fPIC -fno-strict-aliasing"; export CFLAGS
%global _hardened_build 1
CPPFLAGS="${__global_cflags} -I%{_includedir}/et -I%{_includedir}/kerberosIV -fno-strict-aliasing"; export CPPFLAGS
CFLAGS="%{__global_cflags} -fno-strict-aliasing"; export CFLAGS
CCDLFLAGS="-rdynamic"; export CCDLFLAGS
LDFLAGS="-Wl,-z,now -Wl,-z,relro"
%ifnarch ppc ppc64
@ -171,7 +173,7 @@ LDFLAGS="$LDFLAGS -pie"; export LDFLAGS
make -C man -f Makefile.dist
make -C doc -f Makefile.dist
make
make LDFLAGS="$LDFLAGS -pie %{__global_ldflags}"
make -C notifyd notifytest
%install
@ -466,6 +468,9 @@ fi
%{_mandir}/man1/*
%changelog
* Thu Apr 18 2013 Michal Hlavinka <mhlavink@redhat.com> - 2.4.17-3
- make sure binaries are hardened
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.17-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild