Use global hardening specification instead of hardening made by openssh.

Openssh uses by default -fPIE flag, which didn't allow to build
pam_ssh_agent_auth.so with from libssh.a.
Validated using /CoreOS/openssh/Regression/bz642927-add-relro-flag
This commit is contained in:
Jakub Jelen 2015-02-16 16:10:19 +01:00
parent 0a4ac4f4d3
commit 14c675f3a5

View File

@ -5,6 +5,8 @@
%define WITH_SELINUX 0
%endif
%global _hardened_build 1
# OpenSSH privilege separation requires a user & group ID
%define sshd_uid 74
%define sshd_gid 74
@ -496,6 +498,7 @@ fi
--without-zlib-version-check \
--with-ssl-engine \
--with-ipaddr-display \
--with-pie=no \
%if %{ldap}
--with-ldap \
%endif