rpms/supermin
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable hardening flags by building the static 'init' specially before the main build.

Browse Source 
Fixes: RHBZ#1202091
This commit is contained in:
Richard W.M. Jones 2015-03-16 12:50:56 +00:00
parent 4212fecbab
commit 8c0345898b
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
supermin.spec
View File

@ -1,11 +1,7 @@
# _hardened_build breaks building the static 'init' binary.
# https://bugzilla.redhat.com/show_bug.cgi?id=1202091
%undefine _hardened_build
Summary: Tool for creating supermin appliances Summary: Tool for creating supermin appliances
Name: supermin Name: supermin
Version: 5.1.12 Version: 5.1.12
Release: 4%{?dist} Release: 5%{?dist}
License: GPLv2+ License: GPLv2+
%if 0%{?rhel} >= 7 %if 0%{?rhel} >= 7
@ -78,6 +74,12 @@ from supermin appliances.
%build %build
%configure --disable-network-tests %configure --disable-network-tests
# Build the static init without any special hardening flags.
# https://bugzilla.redhat.com/show_bug.cgi?id=1202091
make -C src init CFLAGS="-g -O2" LDFLAGS="-g -O2"
# Build the rest of the program with hardening flags.
make make
@ -116,6 +118,10 @@ make check || {
%changelog %changelog
* Mon Mar 16 2015 Richard W.M. Jones <rjones@redhat.com> - 5.1.12-5
- Enable hardening flags by building the static 'init' specially
before the main build.
* Thu Mar 12 2015 Richard W.M. Jones <rjones@redhat.com> - 5.1.12-4 * Thu Mar 12 2015 Richard W.M. Jones <rjones@redhat.com> - 5.1.12-4
- Add a -devel subpackage containing automated RPM dependency generator - Add a -devel subpackage containing automated RPM dependency generator
for supermin appliances. for supermin appliances.