Add full relro binary hardening option

Change-Id: Ic14ed9284fedd335c107c038630683567a9147d7

diff --git a/packaging/nspr.spec b/packaging/nspr.spec
index 17c5637..9a11b18 100644 (file)
--- a/packaging/nspr.spec
+++ b/packaging/nspr.spec
@@ -41,6 +41,7 @@ BUILD_STRING="$(date -u -d "${modified}" "+%%F %%T")"
 BUILD_TIME="$(date -u -d "${modified}" "+%%s000000")"
 #cd nspr
 export CFLAGS="%{optflags}"
+export LDFLAGS+=" -Wl,-z,relro,-z,now"
 %configure --enable-optimize="$CFLAGS" \
 %ifarch x86_64
            --enable-64bit \