Added hardening compiler flags in the makefile. 45/167845/2 accepted/tizen/unified/20180126.042842 submit/tizen/20180123.012239 submit/tizen/20180124.050653 submit/tizen/20180125.065647
authorAbhishek Sansanwal <abhishek.s94@samsung.com>
Mon, 22 Jan 2018 10:21:53 +0000 (15:51 +0530)
committerAbhishek Sansanwal <abhishek.s94@samsung.com>
Mon, 22 Jan 2018 10:21:53 +0000 (15:51 +0530)
Description: Enabled stack protector, relro, PIE,
fortify source and other flags

Signed-off-by: Abhishek Sansanwal <abhishek.s94@samsung.com>
Change-Id: I5777a6fd21b1debae46c695c9623ef1779f7463d

mDNSPosix/Makefile

index cf4e073..ede1196 100755 (executable)
@@ -158,9 +158,10 @@ OPTIONALTARG = dnsextd
 else
 
 ifeq ($(os),tizen)
-CFLAGS_OS = -D_GNU_SOURCE -DHAVE_IPV6 -DNOT_HAVE_SA_LEN -DUSES_NETLINK -DHAVE_LINUX -DTARGET_OS_LINUX -DTIZEN_EXT -DCONFIG_DISABLE_REUSEPORT -fno-strict-aliasing
+CFLAGS_OS = -D_GNU_SOURCE -DHAVE_IPV6 -DNOT_HAVE_SA_LEN -DUSES_NETLINK -DHAVE_LINUX -DTARGET_OS_LINUX -DTIZEN_EXT -DCONFIG_DISABLE_REUSEPORT -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fPIE
 CFLAGS_ASLR = -fPIE
 LINKOPTS_ASLR = -pie
+LINKOPTS = -Wl,-z,relro
 LD = $(CC) -shared
 FLEXFLAGS_OS = -l
 INSTBASE = $(DESTDIR)/usr
@@ -264,7 +265,7 @@ Daemon: setup $(BUILDDIR)/mdnsd
        @echo "Responder daemon done"
 
 $(BUILDDIR)/mdnsd: $(DAEMONOBJS)
-       $(CC) -o $@ $+ $(LINKOPTS_DAEMON)
+       $(CC) -o $@ $+ $(LINKOPTS_DAEMON) -pie
        @$(STRIP) $@
 
 # libdns_sd target builds the client library