Added hardening compiler flags in the spec file. 39/167839/1 submit/tizen/20180123.012239
authorAbhishek Sansanwal <abhishek.s94@samsung.com>
Mon, 22 Jan 2018 09:27:02 +0000 (14:57 +0530)
committerAbhishek Sansanwal <abhishek.s94@samsung.com>
Mon, 22 Jan 2018 09:27:02 +0000 (14:57 +0530)
Description: Enabled stack protector, relro, PIE,
fortify source and other flags

Change-Id: I2e569da65cec7120f8ed250a06808f5efb408eb9
Signed-off-by: Abhishek Sansanwal <abhishek.s94@samsung.com>
packaging/curl.spec

index 1239127..bb36ac8 100644 (file)
@@ -70,7 +70,7 @@ cp %{SOURCE1001} .
 %build
 
 export CPPFLAGS="-DHAVE_PK11_CREATEGENERICOBJECT"
-
+CFLAGS+=" -fstack-protector-strong -Wl,-z,relro -D_FORTIFY_SOURCE=2 -fPIE -pie"
 %if "%{TIZEN_PROFILE_TV}" == "1"
 CFLAGS+=" -DTIZEN_TV_EXT"
 %reconfigure --without-nss --without-gnutls --with-openssl --disable-ipv6 \