From 4db4008b50d908c2efdf9365bc1f726d78a4e5ff Mon Sep 17 00:00:00 2001 From: Tomas Hozza Date: Sat, 20 Apr 2013 21:17:23 +0200 Subject: [PATCH] Use Full RELRO when linking the daemon Signed-off-by: Tomas Hozza --- dnsmasq.spec | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/dnsmasq.spec b/dnsmasq.spec index f81c23e..4e544ce 100644 --- a/dnsmasq.spec +++ b/dnsmasq.spec @@ -79,8 +79,8 @@ sed -i 's|#conf-dir=/etc/dnsmasq.d|conf-dir=/etc/dnsmasq.d|g' dnsmasq.conf.examp %build -# We need to compile the daemon with PIE -RPM_LD_FLAGS="-Wl,-z,relro -pie" +# We need to compile the daemon with PIE, PIC and FULL RELRO +RPM_LD_FLAGS="-Wl,-z,relro,-z,now -pie" RPM_OPT_FLAGS="$RPM_OPT_FLAGS -fPIE -DPIE -fPIC" make %{?_smp_mflags} CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS" @@ -146,7 +146,8 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man1/dhcp_* %changelog -* Fri Apr 19 2013 Tomas Hozza - 2.66-3 +* Sat Apr 20 2013 Tomas Hozza - 2.66-3 +- Use Full RELRO when linking the daemon - compile the daemon with PIE - include two fixes from upstream git repo