Enable BIND_NOW for the linked library too

Related: rhbz#2002747
This commit is contained in:
Simon Pichugin 2021-09-23 10:26:14 -07:00
parent 65db55d8d8
commit cfa2ee4aef

View File

@ -7,7 +7,7 @@
Name: openldap
Version: 2.4.59
Release: 2%{?dist}
Release: 3%{?dist}
Summary: LDAP support libraries
License: OpenLDAP
URL: http://www.openldap.org/
@ -330,7 +330,7 @@ for lib in $(ls | grep libldap_r-); do
then
so_ver_short="${libsplit[3]}"
unset IFS
gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed \
gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed -Wl,-z,now \
-Wl,-soname -Wl,libldap-${version}.so.${so_ver_short} -L "%{buildroot}%{_libdir}" -lldap_r
else
so_ver_full="${libsplit[3]}.${libsplit[4]}.${libsplit[5]}"
@ -556,6 +556,9 @@ exit 0
%{_libdir}/libldap-2.4*.so.*
%changelog
* Thu Sep 23 2021 Simon Pichugin <spichugi@redhat.com> - 2.4.59-3
- Enable BIND_NOW for the linked library too. Related: rhbz#2002747
* Wed Sep 22 2021 Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
- Enable BIND_NOW to prevent GOT overwrite attacks.
- Ignore badfuncs error in rpminspect because it's a false positive