Rebuild for libswan soname bump (bz #1009701) CVE-2013-4311: Insecure polkit usage (bz #1009539, bz #1005332) CVE-2013-4296: Invalid free memory stats (bz #1006173, bz #1009667) CVE-2013-4297: Invalid free in NBDDeviceAssociate (bz #1006505, bz #1006511) Fix virsh block-commit abort (bz #1010056)
89 lines
4.2 KiB
Diff
89 lines
4.2 KiB
Diff
From bd4e7f927fcc2edcba29e441973389ad845d648c Mon Sep 17 00:00:00 2001
|
|
From: =?UTF-8?q?Guido=20G=C3=BCnther?= <agx@sigxcpu.org>
|
|
Date: Sun, 1 Sep 2013 08:50:58 +0200
|
|
Subject: [PATCH] Pass AM_LDFLAGS to driver modules too
|
|
|
|
This gives us a RO got, otherwise Debian's lintian complains:
|
|
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_qemu.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_storage.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_uml.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_vbox.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_xen.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_nwfilter.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_storage.so
|
|
W: libvirt-bin: hardening-no-relro usr/lib/libvirt/connection-driver/libvirt_driver_uml.so
|
|
W: libvirt-sanlock: hardening-no-relro usr/lib/libvirt/lock-driver/sanlock.so
|
|
(cherry picked from commit f1f0e53b0814aab3c093f1219da95c0f836cdf4a)
|
|
---
|
|
src/Makefile.am | 14 +++++++-------
|
|
1 file changed, 7 insertions(+), 7 deletions(-)
|
|
|
|
diff --git a/src/Makefile.am b/src/Makefile.am
|
|
index 19dfb81..097682c 100644
|
|
--- a/src/Makefile.am
|
|
+++ b/src/Makefile.am
|
|
@@ -1000,7 +1000,7 @@ libvirt_driver_xen_la_LIBADD = libvirt_driver_xen_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_xen.la
|
|
libvirt_driver_xen_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_xen_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_xen_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_xen.la
|
|
# Stateful, so linked to daemon instead
|
|
@@ -1050,7 +1050,7 @@ libvirt_driver_vbox_la_LIBADD = libvirt_driver_vbox_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_vbox.la
|
|
libvirt_driver_vbox_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_vbox_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_vbox_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_vbox.la
|
|
# GPLv2-only license requries that it be linked into
|
|
@@ -1083,7 +1083,7 @@ libvirt_driver_libxl_la_LIBADD = libvirt_driver_libxl_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_libxl.la
|
|
libvirt_driver_libxl_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_libxl_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_libxl_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_libxl.la
|
|
# Stateful, so linked to daemon instead
|
|
@@ -1108,7 +1108,7 @@ libvirt_driver_qemu_la_LIBADD = libvirt_driver_qemu_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_qemu.la
|
|
libvirt_driver_qemu_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_qemu_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_qemu_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_qemu.la
|
|
# Stateful, so linked to daemon instead
|
|
@@ -1184,7 +1184,7 @@ libvirt_driver_uml_la_LIBADD = libvirt_driver_uml_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_uml.la
|
|
libvirt_driver_uml_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_uml_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_uml_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_uml.la
|
|
# Stateful, so linked to daemon instead
|
|
@@ -1361,7 +1361,7 @@ libvirt_driver_storage_la_LIBADD = libvirt_driver_storage_impl.la
|
|
if WITH_DRIVER_MODULES
|
|
mod_LTLIBRARIES += libvirt_driver_storage.la
|
|
libvirt_driver_storage_la_LIBADD += ../gnulib/lib/libgnu.la
|
|
-libvirt_driver_storage_la_LDFLAGS = -module -avoid-version
|
|
+libvirt_driver_storage_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
else
|
|
noinst_LTLIBRARIES += libvirt_driver_storage.la
|
|
# Stateful, so linked to daemon instead
|
|
@@ -2114,7 +2114,7 @@ if WITH_SANLOCK
|
|
lockdriver_LTLIBRARIES += sanlock.la
|
|
sanlock_la_SOURCES = $(LOCK_DRIVER_SANLOCK_SOURCES)
|
|
sanlock_la_CFLAGS = -I$(top_srcdir)/src/conf $(AM_CFLAGS)
|
|
-sanlock_la_LDFLAGS = -module -avoid-version
|
|
+sanlock_la_LDFLAGS = -module -avoid-version $(AM_LDFLAGS)
|
|
sanlock_la_LIBADD = -lsanlock_client \
|
|
../gnulib/lib/libgnu.la
|
|
|