Commit Graph

382 Commits

Author SHA1 Message Date
Adam Jackson
7b12d83d77 redhat-hardened-cc1: Inject -fPIE, not -fPIC. cf. http://lists.fedoraproject.org/pipermail/devel/2011-September/157365.html 2014-01-24 23:45:40 +02:00
Adam Jackson
5034f24e6a Expose %_hardening_{c,ld}flags independently to make it easier for packages to apply them to selected components 2014-01-24 23:45:05 +02:00
Colin Walters
8174ec3d10 macros: Globally add --disable-silent-rules to configure
Various projects have been adding AM_SILENT_RULES from Automake to
their Makefiles for "developer convenience"; the goal being that they
see warnings more easily.

Now really the right way to do this is to have a make wrapper (or an IDE)
that knows how to filter out warnings, but let's leave that aside for now.

But for debugging builds, we really need the full log data.  Being
able to see exactly how e.g. libtool is being run helps a lot for
debugging link problems as an example.
2014-01-24 23:42:25 +02:00
Adam Jackson
0ae4b38eee redhat-hardened-{cc1,ld}: Move some of the rewrite magic to gcc specs so we don't end up with both -fPIC and -fPIE on the command line 2014-01-24 23:41:09 +02:00
Adam Jackson
51811936c4 redhat-rpm-config-9.1.0-hardened.patch: Add macro magic for %_hardened_build 2014-01-24 23:36:04 +02:00
Adam Jackson
4b29a24132 redhat-rpm-config-9.1.0-relro.patch: LDFLAGS, not CFLAGS. 2014-01-24 23:34:16 +02:00
Jon Masters
16f86875d9 redhat-rpm-config: change default arch level target for all ARM v7 to armv7hl
All ARM version 7 systems support a vector hardware floating point unit and
have the ability to run using the hard floating point ABI (aapcs-vfpv3-d16).
This is the only configuration we support as a v7 target, so we force the
use of hard floating point. This prevents e.g. packages being built with
a armv5tel target on an armv7 system without explicit intent.

Signed-off-by: Jon Masters <jcm@jonmasters.org>
2014-01-24 23:30:45 +02:00
Adam Jackson
60aea2849e Add -z relro 2014-01-24 23:24:07 +02:00
Jens Petersen
d8bfddbf7e Revert "replace ghc_archs with ghc_excluded_archs"
This reverts commit 8fc99b69b6.
2014-01-24 23:22:42 +02:00
Jens Petersen
71ab2d9056 replace ghc_archs with ghc_excluded_archs 2014-01-24 23:19:09 +02:00
Dennis Gilmore
fe1e807f2f add arm hardware floating point macros update the armv7l macros 2014-01-24 23:13:58 +02:00
Dennis Gilmore
dc985dd5fc add a -srpm to the arch macros so they dont conflict with the langaugae base arch macros 2014-01-24 23:12:41 +02:00
Dennis Gilmore
9ecf19e1bd add macros defining arches so language stacks can add new arches without adding the arches to every spec file macros are needed at srpm creation time so live here 2014-01-24 23:02:24 +02:00
Panu Matilainen
26a7faf833 - adjust to new pkg-config behavior wrt private dependencies (#596433) 2014-01-24 22:57:27 +02:00
Kevin Fenzi
e04bd964a3 Update libtool hardening hack and re-enable (#978949) 2014-01-13 12:45:57 -07:00
Dhiru Kholia
d1c22eee30 Enable "-Werror=format-security" by default (#1043495) 2013-12-18 08:41:34 +02:00
Karsten Hopp
f808f779df update config.sub with ppc64p7 support (already in automake)
We used to fix this in the selected ppc64p7 packages, but can't do that anymore
because the current %configure macro overwrites our changes.
2013-09-04 21:55:10 +02:00
Panu Matilainen
8f766c5ee4 - oops, accidentally removed source in previous commit 2013-08-16 14:05:48 +03:00
Panu Matilainen
499f65fa2a - update config.guess/sub from upstream for little-endian ppc archs 2013-08-16 13:25:23 +03:00
Petr Písař
8716aaa134 Perl 5.18 rebuild 2013-07-29 08:56:28 +02:00
Tomas Mraz
daac6dfeb6 Disable the libtool hack as it is breaking builds 2013-07-25 16:42:52 +02:00
Kevin Fenzi
e6fe460e84 Make docdirs unversioned on Fedora 20+ (#986871)
- Hack around libtool issue for hardened build for now (#978949)
2013-07-24 16:20:05 -06:00
Petr Písař
3610794c3e Perl 5.18 rebuild 2013-07-17 21:02:48 +02:00
Panu Matilainen
15fbd4c0c2 - fix brp-java-repack-jars failing on strange permissions (#905573) 2013-07-05 13:29:16 +03:00
Panu Matilainen
8153763b1f - switch from -fstack-protector to -fstack-protector-strong (#978763) 2013-07-04 10:26:49 +03:00
Panu Matilainen
3be8fc4ae6 - make cpu limit for building configurable through _smp_ncpus_max macro
- forward "port" from rhel-6 (#669638)
2013-06-27 10:08:01 +03:00
Panu Matilainen
9781bbafca Fix an old bogus date in changelog 2013-05-29 13:00:57 +03:00
T.C. Hollingsworth
490aabb061 add nodejs_arches macro for ExclusiveArch for Node.js packages 2013-05-29 12:56:32 +03:00
Adam Jackson
6ef9b403ea Less verbose of a comment 2013-05-13 12:30:24 -04:00
Adam Jackson
3cff8f9b97 redhat-config-*: Use + to append rather than %rename, to protect against
multiple -specs= ending up in the command line. (#892837)
2013-05-13 11:19:02 -04:00
Panu Matilainen
234364ec2f - Also set FCFLAGS from %%configure (#914831) 2013-04-23 07:33:30 +03:00
Panu Matilainen
4b27de8d70 - Add optflags stack protector override for AArch64 (#909788) 2013-04-23 07:31:50 +03:00
Panu Matilainen
4481ddfec4 - Doh, add redhat-rpm-config-9.1.0.tar.bz2 back to sources 2013-04-22 14:54:31 +03:00
Panu Matilainen
9c8971c1cd - Switch back to manual config.guess/sub copies for reproducability
- Replace config.guess/sub from %%configure again (#951442)
2013-04-22 14:16:11 +03:00
Panu Matilainen
5ec4cc65c2 - Add -grecord-gcc-switches to global CFLAGS (#951669) 2013-04-22 13:20:19 +03:00
Panu Matilainen
ea63b1b6bc - Add virtual system-rpm-config provide 2013-03-25 13:08:11 +02:00
Dennis Gilmore
6ec83fd8c4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-14 15:31:02 -06:00
Jens Petersen
1b89fd3a33 add ARM to ghc_arches_with_ghci for ghc-7.4.2 ghci support
This change must not be backported to F18 before ghc-7.4.2.
2012-11-17 21:25:07 +09:00
Toshio Kuratomi
83cfe608da Patch to fix spaces in java jar files
https://bugzilla.redhat.com/show_bug.cgi?id=872737
2012-11-09 13:49:08 -08:00
Toshio Kuratomi
c4fd9e0f75 Refresh 0001-Drop-un-setting-LANG-and-DISPLAY-in-various-build-st.patch
(Line offset has canged by a few lines).
2012-11-09 03:44:55 -08:00
Toshio Kuratomi
62a6fd7d9f Patch to fix spaces in files used in filtering macros
https://bugzilla.redhat.com/show_bug.cgi?id=783932
2012-11-09 03:40:39 -08:00
Toshio Kuratomi
5c4ec180bc Drop (un)setting LANG and DISPLAY in build stages, require rpm >= 4.8.0. 2012-10-03 18:19:33 -07:00
Toshio Kuratomi
94c3f755ba Add patch from https://bugzilla.redhat.com/show_bug.cgi?id=783433
to fix spaces in files and directories that are fed to the
  brp-python-hardlink script
- Require zip since java repack jars requires it
  https://bugzilla.redhat.com/show_bug.cgi?id=857479
- Java jars need the MANIFEST.MF file to be first in the archive
  https://bugzilla.redhat.com/show_bug.cgi?id=465664
- Fix kernel_source macro to match the directory that kernel sources are installed in
  https://bugzilla.redhat.com/show_bug.cgi?id=648996
- Patch _mandir, _infodir, and _defaultocdir to use _prefix
  https://bugzilla.redhat.com/show_bug.cgi?id=853216
2012-10-03 17:30:10 -07:00
Toshio Kuratomi
94fba4eae8 Add patch from https://bugzilla.redhat.com/show_bug.cgi?id=783433
to fix spaces in files and directories that are fed to the
  brp-python-hardlink script
2012-10-03 10:17:07 -07:00
Dennis Gilmore
0577043ed3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-21 10:25:12 -05:00
Panu Matilainen
e95fc2098b - enable minidebuginfo generation (#834073) 2012-06-27 13:32:42 +03:00
Panu Matilainen
7f5c2c3943 - revert back to plain -g, -g3 seems to cancel dwz size improvements 2012-06-25 17:22:09 +03:00
Panu Matilainen
5316e51652 - require dwz, enable dwarf compression for debuginfo packages (#833311) 2012-06-25 14:42:15 +03:00
Petr Písař
51aea39741 Pull in dependency with macros specific for building Perl source packages 2012-06-06 14:00:11 +02:00
Jens Petersen
6ce33965b9 ghc_arches: add s390 and s390x 2012-03-03 15:31:01 +09:00