Blame 0001-build-Enable-BIND_NOW.patch
|
Bastien Nocera |
88e500 |
From e45c8fdcb3d7cdb654f6819c02d1bbb5b40b6116 Mon Sep 17 00:00:00 2001
|
|
Bastien Nocera |
88e500 |
From: Florian Weimer <fweimer@redhat.com>
|
|
Bastien Nocera |
88e500 |
Date: Thu, 7 Nov 2013 09:23:35 +0100
|
|
Bastien Nocera |
88e500 |
Subject: [PATCH 1/4] build: Enable BIND_NOW
|
|
Bastien Nocera |
88e500 |
|
|
Bastien Nocera |
88e500 |
Partial RELRO means that the object is GNU_RELRO but not BIND_NOW. This
|
|
Bastien Nocera |
88e500 |
reduces the effectiveness of RELRO. bluez triggers this because it
|
|
Bastien Nocera |
88e500 |
enables PIE during the build, and rpmdiff takes this as an indicator
|
|
Bastien Nocera |
88e500 |
that the best possible hardening is desired.
|
|
Bastien Nocera |
88e500 |
|
|
Bastien Nocera |
88e500 |
https://bugzilla.redhat.com/show_bug.cgi?id=983161
|
|
Bastien Nocera |
88e500 |
---
|
|
Bastien Nocera |
88e500 |
acinclude.m4 | 2 +-
|
|
Bastien Nocera |
88e500 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
Bastien Nocera |
88e500 |
|
|
Bastien Nocera |
88e500 |
diff --git a/acinclude.m4 b/acinclude.m4
|
|
Bastien Nocera |
88e500 |
index bc39c6d73..efce2f3cb 100644
|
|
Bastien Nocera |
88e500 |
--- a/acinclude.m4
|
|
Bastien Nocera |
88e500 |
+++ b/acinclude.m4
|
|
Bastien Nocera |
88e500 |
@@ -50,7 +50,7 @@ AC_DEFUN([MISC_FLAGS], [
|
|
Bastien Nocera |
88e500 |
if (test "${enableval}" = "yes" &&
|
|
Bastien Nocera |
88e500 |
test "${ac_cv_prog_cc_pie}" = "yes"); then
|
|
Bastien Nocera |
88e500 |
misc_cflags="$misc_cflags -fPIC"
|
|
Bastien Nocera |
88e500 |
- misc_ldflags="$misc_ldflags -pie"
|
|
Bastien Nocera |
88e500 |
+ misc_ldflags="$misc_ldflags -pie -Wl,-z,now"
|
|
Bastien Nocera |
88e500 |
fi
|
|
Bastien Nocera |
88e500 |
])
|
|
Bastien Nocera |
88e500 |
if (test "$enable_coverage" = "yes"); then
|
|
Bastien Nocera |
88e500 |
--
|
|
Bastien Nocera |
88e500 |
2.14.1
|
|
Bastien Nocera |
88e500 |
|