Apply security options

1) Stack protector(Canary): -fstack-protector-strong
2) Partial RELRO(RELocation-ReadOnly): -Wl,-z,relro

Change-Id: I86851d3178d2549ca719910a58b4eab3efba3197
Signed-off-by: Dongkyun Son <dongkyun.s@samsung.com>

diff --git a/Tizen:Base/_config b/Tizen:Base/_config
index 17d57fc..eb469ab 100644 (file)
--- a/Tizen:Base/_config
+++ b/Tizen:Base/_config
@@ -198,7 +198,7 @@ Substitute: glibc-devel-32bit
 %endif
 
 ########## compilation flags ##########
-%define __global_cflags -O2 -g2 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector -Wformat-security -fmessage-length=0 -Wl,--as-needed
+%define __global_cflags -O2 -g2 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong -Wformat-security -fmessage-length=0 -Wl,-z,relro,--as-needed
 
 Optflags: armv7l %{__global_cflags} --param=ssp-buffer-size=4 -march=armv7-a -mtune=cortex-a8 -mlittle-endian -mfpu=neon -mfloat-abi=softfp -mthumb -Wp,-D__SOFTFP__ -Wl,-O1 -Wl,--hash-style=gnu -Wa,-mimplicit-it=thumb
 Optflags: aarch64 %{__global_cflags} -feliminate-unused-debug-types -Wformat -march=armv8-a+fp+simd+crc+crypto -mtune=cortex-a57.cortex-a53