modify build option to apply ASLR and set service uid/gid

Change-Id: Ie576f77619784dcc10448d5590a3af9135b98b79
Signed-off-by: jiehwan <jiehwan.park@samsung.com>

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 440b7857c97d920d3432063ac3f667a94d812fc3..cf1627e8a62ad3bf3fc716cd0d3de2abd1a0dded 100644 (file)
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -3,8 +3,9 @@ PROJECT(setup-adaptor C)
 
 INCLUDE(FindPkgConfig)
 
-SET(EXTRA_CFLAGS "-Wall -Werror-implicit-function-declaration -fvisibility=hidden")
+SET(EXTRA_CFLAGS "-Wall -Werror-implicit-function-declaration -fvisibility=hidden -fpie")
 SET(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${EXTRA_CFLAGS}")
+SET(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} -pie")
 
 SET(SETUP-ADAPTOR ${PROJECT_NAME})
 

diff --git a/packaging/setup-adaptor.service b/packaging/setup-adaptor.service
index 02efdf27abb67a94d07aac098e53723a59fad60d..e10043ba3dcce3dd48579a0777150910a1346c40 100644 (file)
--- a/packaging/setup-adaptor.service
+++ b/packaging/setup-adaptor.service
@@ -6,6 +6,8 @@ Requires=connman.service
 [Service]
 SmackProcessLabel=System
 Type=oneshot
+User=system_fw
+Group=system_fw
 ExecStart=/usr/bin/setup-adaptor
 
 [Install]

diff --git a/packaging/setup-adaptor.spec b/packaging/setup-adaptor.spec
index bf26255f0d68755089549481207032660192646e..86d1ad1f0b22200f9c5c2a2cdd0f51d142c69d48 100755 (executable)
--- a/packaging/setup-adaptor.spec
+++ b/packaging/setup-adaptor.spec
@@ -29,7 +29,7 @@ cp %{SOURCE1} ./
 cp %{SOURCE2} ./
 
 %build
-export LDFLAGS+="-Wl,--as-needed"
+export LDFLAGS+="-Wl,--as-needed,-z,noexecstack"
 MAJORVER=`echo %{version} | awk 'BEGIN {FS="."}{print $1}'`
 
 %cmake . \