packaging: add noexecstack option in LDFLAGS for Data Execution Prevention

req. from   : security part
req. reason : https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks

[before]
$ readelf -l libffi.so.6 | grep STACK
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RWE 0x10

[after]
$ readelf -l libffi.so.6 | grep STACK
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x10

Change-Id: If29268f7905298185ab639b3bb7a7b3c4080b3b7
Signed-off-by: SungHun Hwang <sh0924.hwang@samsung.com>

diff --git a/packaging/libffi.spec b/packaging/libffi.spec
index 89efc2cc7447c6673c1e53a9f535b61b5664d8bc..6c3c92e2619cb0adafa4d4e5b11207f78f2ad4b6 100644 (file)
--- a/packaging/libffi.spec
+++ b/packaging/libffi.spec
@@ -52,6 +52,7 @@ developing applications that use %{name}.
 
 
 %build
+export LDFLAGS+="-Wl,-z,noexecstack"
 %reconfigure --disable-static
 make %{?_smp_mflags}