Improve the security of the generated code by hardening

Resolves: RHEL-33495
This commit is contained in:
Jacek Migacz 2024-08-21 21:30:26 +02:00
parent df50ad7084
commit a9e5a8f647

View File

@ -250,7 +250,6 @@ rm -f lisp/play/pong.el lisp/play/pong.elc
ln -s ../../%{name}/%{version}/etc/COPYING doc ln -s ../../%{name}/%{version}/etc/COPYING doc
ln -s ../../%{name}/%{version}/etc/NEWS doc ln -s ../../%{name}/%{version}/etc/NEWS doc
%build %build
export CFLAGS="-DMAIL_USE_LOCKF %{build_cflags}" export CFLAGS="-DMAIL_USE_LOCKF %{build_cflags}"
%set_build_flags %set_build_flags
@ -259,7 +258,7 @@ export CFLAGS="-DMAIL_USE_LOCKF %{build_cflags}"
mkdir build-lucid && cd build-lucid mkdir build-lucid && cd build-lucid
ln -s ../configure . ln -s ../configure .
LDFLAGS=-Wl,-z,relro; export LDFLAGS; LDFLAGS=-Wl,-z,relro,-z,now; export LDFLAGS;
%configure --with-cairo \ %configure --with-cairo \
--with-dbus \ --with-dbus \
@ -287,6 +286,9 @@ cd ..
# Build binary without X support # Build binary without X support
mkdir build-nw && cd build-nw mkdir build-nw && cd build-nw
ln -s ../configure . ln -s ../configure .
LDFLAGS=-Wl,-z,relro,-z,now; export LDFLAGS;
%configure --with-json \ %configure --with-json \
--with-modules \ --with-modules \
--with-native-compilation=no \ --with-native-compilation=no \
@ -304,7 +306,7 @@ cd ..
mkdir build-gtk+x11 && cd build-gtk+x11 mkdir build-gtk+x11 && cd build-gtk+x11
ln -s ../configure . ln -s ../configure .
LDFLAGS=-Wl,-z,relro; export LDFLAGS; LDFLAGS=-Wl,-z,relro,-z,now; export LDFLAGS;
%configure --with-cairo \ %configure --with-cairo \
--with-dbus \ --with-dbus \
@ -333,7 +335,7 @@ cd ..
mkdir build-pgtk && cd build-pgtk mkdir build-pgtk && cd build-pgtk
ln -s ../configure . ln -s ../configure .
LDFLAGS=-Wl,-z,relro; export LDFLAGS; LDFLAGS=-Wl,-z,relro,-z,now; export LDFLAGS;
%configure --with-cairo \ %configure --with-cairo \
--with-dbus \ --with-dbus \