Use global hardening specification instead of hardening made by openssh.
Openssh uses by default -fPIE flag, which didn't allow to build pam_ssh_agent_auth.so with from libssh.a. Validated using /CoreOS/openssh/Regression/bz642927-add-relro-flag
This commit is contained in:
parent
0a4ac4f4d3
commit
14c675f3a5
@ -5,6 +5,8 @@
|
||||
%define WITH_SELINUX 0
|
||||
%endif
|
||||
|
||||
%global _hardened_build 1
|
||||
|
||||
# OpenSSH privilege separation requires a user & group ID
|
||||
%define sshd_uid 74
|
||||
%define sshd_gid 74
|
||||
@ -496,6 +498,7 @@ fi
|
||||
--without-zlib-version-check \
|
||||
--with-ssl-engine \
|
||||
--with-ipaddr-display \
|
||||
--with-pie=no \
|
||||
%if %{ldap}
|
||||
--with-ldap \
|
||||
%endif
|
||||
|
Loading…
Reference in New Issue
Block a user