don't hardcode hardening flags, let hardened build macro handles it

Signed-off-by: Tomas Hozza <thozza@redhat.com>
This commit is contained in:
Tomas Hozza 2013-07-03 15:25:13 +02:00
parent b3131e6051
commit f577e323b0

View File

@ -109,9 +109,6 @@ Python modules and extensions for unbound
%patch1 -p1 %patch1 -p1
%build %build
export LDFLAGS="-Wl,-z,relro,-z,now -pie -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"
export CFLAGS="$RPM_OPT_FLAGS -fPIE -pie"
export CXXFLAGS="$RPM_OPT_FLAGS -fPIE -pie"
%configure --with-ldns= --with-libevent --with-pthreads --with-ssl \ %configure --with-ldns= --with-libevent --with-pthreads --with-ssl \
--disable-rpath --disable-static \ --disable-rpath --disable-static \
--with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \ --with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \
@ -279,6 +276,7 @@ exit 0
%changelog %changelog
* Wed Jul 03 2013 Tomas Hozza <thozza@redhat.com> - 1.4.20-14 * Wed Jul 03 2013 Tomas Hozza <thozza@redhat.com> - 1.4.20-14
- remove missing unbound-rootkey.service from post/preun/postun sections - remove missing unbound-rootkey.service from post/preun/postun sections
- don't hardcode hardening flags, let hardened build macro handles it
* Sat Jun 01 2013 Paul Wouters <pwouters@redhat.com> - 1.4.20-13 * Sat Jun 01 2013 Paul Wouters <pwouters@redhat.com> - 1.4.20-13
- Run unbound-anchor as user unbound in unbound.service - Run unbound-anchor as user unbound in unbound.service