Added binary hardening options

* stack-protector-strong
* FORTIFY_SOURCE
* -zrelro -znow

Change-Id: I260204b87da91e1d26bfe3b63f95c72ac5296703

diff --git a/packaging/smack.spec b/packaging/smack.spec
index e0ff9d6..79bf66e 100644 (file)
--- a/packaging/smack.spec
+++ b/packaging/smack.spec
@@ -35,7 +35,9 @@ Library allows applications to work with Smack.
 cp %{SOURCE1001} .
 
 %build
-%reconfigure --with-systemdsystemunitdir=%{_unitdir} CFLAGS=-fPIE LDFLAGS=-pie
+export CFLAGS+=" -fPIE -Wl,-z,relro,-z,now -fstack-protector-strong -O2"
+export LDFLAGS=" -pie"
+%reconfigure --with-systemdsystemunitdir=%{_unitdir}
 
 make %{?_smp_mflags}