packaging: add noexecstack option in LDFLAGS for Data Execution Prevention

request from   : security part
request reason : https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks

[Before] $ readelf -l ./usr/lib/libgmp.so.3.4.1 | grep STACK
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RWE 0x10

[After] $ readelf -l ./usr/lib/libgmp.so.3.4.1 | grep STACK
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x10

Change-Id: I2e67ceba60a34045865bb7c81b430a82e3735960
Signed-off-by: SungHun Hwang <sh0924.hwang@samsung.com>

diff --git a/packaging/gmp.spec b/packaging/gmp.spec
index fbc5dceb9cd917f823c64f2f6a638f34d4f5ca4c..e6c0059f7481b8eaaf357e16f09eb1fa1ebef680 100644 (file)
--- a/packaging/gmp.spec
+++ b/packaging/gmp.spec
@@ -46,6 +46,7 @@ cp %{SOURCE1001} .
 
 %build
 export CFLAGS="%{optflags} -fexceptions -std=gnu89";
+export LDFLAGS+="-Wl,-z,noexecstack"
 %reconfigure \
          --enable-cxx
 make %{?_smp_mflags}