Add pie compile option

Change-Id: I3bd2e4342a85a5d13887184820ca1432e15dff88

diff --git a/packaging/add_pie_compile_option.patch b/packaging/add_pie_compile_option.patch
new file mode 100644 (file)
index 0000000..3ba8718
--- /dev/null
+++ b/packaging/add_pie_compile_option.patch
@@ -0,0 +1,13 @@
+diff --git a/Makefile.pre.in b/Makefile.pre.in
+index f0eadba..094d399 100644
+--- a/Makefile.pre.in
++++ b/Makefile.pre.in
+@@ -487,7 +487,7 @@ coverage-report: regen-grammar
+
+ # Build the interpreter
+ $(BUILDPYTHON):       Modules/python.o $(LIBRARY) $(LDLIBRARY)
+-              $(LINKCC) $(LDFLAGS) $(LINKFORSHARED) -o $@ \
++              $(LINKCC) $(LDFLAGS) $(LINKFORSHARED) -pie -o $@ \
+                       Modules/python.o \
+                       $(BLDLIBRARY) $(LIBS) $(MODLIBS) $(SYSLIBS) $(LDLAST)
+

diff --git a/packaging/python.spec b/packaging/python.spec
index f5cd14dc246b87e615ae6cf4864f804d58bf17a9..6f4ca78f7712b2c4765f2e49dc491e7885816875 100644 (file)
--- a/packaging/python.spec
+++ b/packaging/python.spec
@@ -13,6 +13,7 @@ Source2:        pythonstart
 Source3:        python.sh
 Source4:        python.csh
 Source6:        python_lib64.patch
+Source10:       add_pie_compile_option.patch
 Source1001:     %name.manifest
 
 
@@ -95,6 +96,7 @@ other applications.
 %ifarch x86_64 aarch64
 %{__patch} -p1 < %{SOURCE6}
 %endif
+%{__patch} -p1 < %{SOURCE10}
 
 # drop Autoconf version requirement
 sed -i 's/^version_required/dnl version_required/' configure.ac