Hardened build with PIE and full RELRO

Resolves: rhbz#853186
This commit is contained in:
Jaroslav Škarvada 2012-09-04 10:35:04 +02:00
parent a9b56922b3
commit b742061bda

View File

@ -1,7 +1,14 @@
# hardened build if not overridden
%{!?_hardened_build:%global _hardened_build 1}
%if %{?_hardened_build}%{!?_hardened_build:0}
%global hardened_flags -pie -Wl,-z,relro,-z,now
%endif
Summary: Mail processing program
Name: procmail
Version: 3.22
Release: 30%{?dist}
Release: 31%{?dist}
License: GPLv2+ or Artistic
Group: Applications/Internet
Source: ftp://ftp.procmail.org/pub/procmail/procmail-%{version}.tar.gz
@ -36,7 +43,7 @@ find examples -type f | xargs chmod 644
%build
make RPM_OPT_FLAGS="$(getconf LFS_CFLAGS)" autoconf.h
make RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wno-comments $(getconf LFS_CFLAGS)"
make RPM_OPT_FLAGS="$RPM_OPT_FLAGS %{?hardened_flags} -Wno-comments $(getconf LFS_CFLAGS)"
%install
rm -rf ${RPM_BUILD_ROOT}
@ -66,6 +73,10 @@ rm -rf ${RPM_BUILD_ROOT}
%{_mandir}/man[15]/*
%changelog
* Tue Sep 4 2012 Jaroslav Škarvada <jskarvad@redhat.com> - 3.22-31
- Hardened build with PIE and full RELRO
Resolves: rhbz#853186
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.22-30
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild