Added hardening compiler flags in the spec file.

Change-Id: I2ad97b89cf85fbea165550da24477434fd822ec6
Signed-off-by: Abhishek Sansanwal <abhishek.s94@samsung.com>

diff --git a/packaging/iptables.spec b/packaging/iptables.spec
index d129eb7..4fcbb7b 100755 (executable)
--- a/packaging/iptables.spec
+++ b/packaging/iptables.spec
@@ -33,8 +33,8 @@ stable and may change with every new version. It is therefore unsupported.
 
 
 %build
-export CFLAGS+=" $RPM_OPT_FLAGS -Wall -Werror -O2 -D_FORTIFY_SOURCE=2 -fno-strict-aliasing -Wno-unused-value"
-export LDFLAGS+=" -Wl,--as-needed"
+export CFLAGS+=" $RPM_OPT_FLAGS -Wall -Werror -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fPIE -pie -fno-strict-aliasing -Wno-unused-value"
+export LDFLAGS+=" -Wl,-z,relro,--as-needed"
 
 %autogen.sh
 %configure --enable-devel --with-kernel=/usr --with-kbuild=/usr --with-ksource=/usr --disable-nftables