rpms/thunderbird
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Enabled hardened builds (rhbz#1283945)

Browse Source
This commit is contained in:
Martin Stransky 2015-11-27 11:14:34 +01:00
parent 0e80cb27b5
commit ef51ffefff
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
thunderbird.spec
View File

@ -1,10 +1,12 @@
# Use system nspr/nss? # Use system nspr/nss?
%define system_nss 1 %define system_nss 1
# Build as a debug package? # Build as a debug package?
%define debug_build 0 %define debug_build 0
# Hardened build?
%define hardened_build 1
%if 0%{?fedora} < 20 %if 0%{?fedora} < 20
%define system_sqlite 0 %define system_sqlite 0
%define system_ffi 0 %define system_ffi 0
@ -62,7 +64,7 @@
Summary: Mozilla Thunderbird mail/newsgroup client Summary: Mozilla Thunderbird mail/newsgroup client
Name: thunderbird Name: thunderbird
Version: 38.3.0 Version: 38.3.0
Release: 2%{?dist} Release: 3%{?dist}
URL: http://www.mozilla.org/projects/thunderbird/ URL: http://www.mozilla.org/projects/thunderbird/
License: MPLv1.1 or GPLv2+ or LGPLv2+ License: MPLv1.1 or GPLv2+ or LGPLv2+
Group: Applications/Internet Group: Applications/Internet
@ -321,6 +323,10 @@ MOZ_OPT_FLAGS=$(echo "$RPM_OPT_FLAGS -fpermissive" | \
%{__sed} -e 's/-Wall//') %{__sed} -e 's/-Wall//')
#rhbz#1037353 #rhbz#1037353
MOZ_OPT_FLAGS="$MOZ_OPT_FLAGS -Wformat-security -Wformat -Werror=format-security" MOZ_OPT_FLAGS="$MOZ_OPT_FLAGS -Wformat-security -Wformat -Werror=format-security"
# Use hardened build?
%if %{?hardened_build}
MOZ_OPT_FLAGS="$MOZ_OPT_FLAGS -fPIC -Wl,-z,relro -Wl,-z,now"
%endif
%if %{?debug_build} %if %{?debug_build}
MOZ_OPT_FLAGS=$(echo "$MOZ_OPT_FLAGS" | %{__sed} -e 's/-O2//') MOZ_OPT_FLAGS=$(echo "$MOZ_OPT_FLAGS" | %{__sed} -e 's/-O2//')
%endif %endif
@ -582,6 +588,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
#=============================================================================== #===============================================================================
%changelog %changelog
* Fri Nov 27 2015 Martin Stransky <stransky@redhat.com> - 31.3.0-3
- Enabled hardened builds (rhbz#1283945)
* Fri Oct 16 2015 Kalev Lember <klember@redhat.com> - 38.3.0-2 * Fri Oct 16 2015 Kalev Lember <klember@redhat.com> - 38.3.0-2
- Fix accidentally commented out AppData screenshot - Fix accidentally commented out AppData screenshot