rpms/openldap
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable BIND_NOW for the linked library too

Browse Source 
Related: rhbz#2002747
This commit is contained in:
Simon Pichugin 2021-09-23 10:26:14 -07:00
parent 65db55d8d8
commit cfa2ee4aef
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
openldap.spec
View File

@ -7,7 +7,7 @@
Name: openldap Name: openldap
Version: 2.4.59 Version: 2.4.59
Release: 2%{?dist} Release: 3%{?dist}
Summary: LDAP support libraries Summary: LDAP support libraries
License: OpenLDAP License: OpenLDAP
URL: http://www.openldap.org/ URL: http://www.openldap.org/
@ -330,7 +330,7 @@ for lib in $(ls | grep libldap_r-); do
then then
so_ver_short="${libsplit[3]}" so_ver_short="${libsplit[3]}"
unset IFS unset IFS
gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed \ gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed -Wl,-z,now \
-Wl,-soname -Wl,libldap-${version}.so.${so_ver_short} -L "%{buildroot}%{_libdir}" -lldap_r -Wl,-soname -Wl,libldap-${version}.so.${so_ver_short} -L "%{buildroot}%{_libdir}" -lldap_r
else else
so_ver_full="${libsplit[3]}.${libsplit[4]}.${libsplit[5]}" so_ver_full="${libsplit[3]}.${libsplit[4]}.${libsplit[5]}"
@ -556,6 +556,9 @@ exit 0
%{_libdir}/libldap-2.4*.so.* %{_libdir}/libldap-2.4*.so.*
%changelog %changelog
* Thu Sep 23 2021 Simon Pichugin <spichugi@redhat.com> - 2.4.59-3
- Enable BIND_NOW for the linked library too. Related: rhbz#2002747
* Wed Sep 22 2021 Simon Pichugin <spichugi@redhat.com> - 2.4.59-2 * Wed Sep 22 2021 Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
- Enable BIND_NOW to prevent GOT overwrite attacks. - Enable BIND_NOW to prevent GOT overwrite attacks.
- Ignore badfuncs error in rpminspect because it's a false positive - Ignore badfuncs error in rpminspect because it's a false positive