From b1c7d8ba9f9e1245ce27ac4020baa0dd77c6950e Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Mon, 2 Sep 2013 19:49:36 +0200
Subject: [PATCH] fix hardening for /usr/sbin/saslauthd

---
 cyrus-sasl.spec | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index f102981..a26f6e2 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -187,8 +187,6 @@ chmod -x include/*.h
 %patch48 -p1 -b .keytab
 
 %build
-CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS
-
 # Find Kerberos.
 krb5_prefix=`krb5-config --prefix`
 if test x$krb5_prefix = x%{_prefix} ; then
@@ -225,7 +223,8 @@ if test x"$LIB_DIR" != "x-L%{_libdir}"; then
         LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
 fi
 
-CFLAGS="$CFLAGS $CPPFLAGS"; export CFLAGS
+CFLAGS="$CFLAGS $CPPFLAGS -fPIE"; export CFLAGS
+LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS
 
 echo "$CFLAGS"
 echo "$CPPFLAGS"