Add PIE linker flags
authorIgor Kotrasinski <i.kotrasinsk@partner.samsung.com>
Thu, 10 Aug 2017 09:58:31 +0000 (11:58 +0200)
committerKonrad Lipinski <k.lipinski2@samsung.com>
Thu, 5 Dec 2019 12:51:17 +0000 (13:51 +0100)
Since krb5 uses gcc rather than ld for linking, add the '-pie' flag to
CFLAGS. Fixes krb5 executables not building as PIE (for ASLR).

Change-Id: If911b4e4839b64af1090aaa210681aecb79a4c31
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>
packaging/krb5.spec

index f15972c..9f8e843 100644 (file)
@@ -66,7 +66,7 @@ cp %{SOURCE1001} .
 rm -f src/lib/krb5/krb/deltat.c
 cd src
 %{?asan:LDFLAGS+=" -ldl -pthread "}
-CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC -fgnu89-inline " \
+CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC -fgnu89-inline -Wl,-pie " \
 ./configure \
        --host=%{_host} --build=%{_build} \
        --prefix=/usr/lib/mit \