From 2bb8ecbd9a50db35d4e1de01f6ec4f870309df47 Mon Sep 17 00:00:00 2001 From: Abhishek Sansanwal Date: Mon, 22 Jan 2018 14:57:02 +0530 Subject: [PATCH] Added hardening compiler flags in the spec file. Description: Enabled stack protector, relro, PIE, fortify source and other flags Change-Id: I2e569da65cec7120f8ed250a06808f5efb408eb9 Signed-off-by: Abhishek Sansanwal --- packaging/curl.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packaging/curl.spec b/packaging/curl.spec index 1239127..bb36ac8 100644 --- a/packaging/curl.spec +++ b/packaging/curl.spec @@ -70,7 +70,7 @@ cp %{SOURCE1001} . %build export CPPFLAGS="-DHAVE_PK11_CREATEGENERICOBJECT" - +CFLAGS+=" -fstack-protector-strong -Wl,-z,relro -D_FORTIFY_SOURCE=2 -fPIE -pie" %if "%{TIZEN_PROFILE_TV}" == "1" CFLAGS+=" -DTIZEN_TV_EXT" %reconfigure --without-nss --without-gnutls --with-openssl --disable-ipv6 \ -- 2.7.4