From 098f3b5fe67c1b45ffdcdd75b85a9de1cc8bf1eb Mon Sep 17 00:00:00 2001
From: Jan Synacek <jsynacek@redhat.com>
Date: Wed, 17 Dec 2014 09:21:38 +0100
Subject: [PATCH] harden the build

---
 openldap.spec | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/openldap.spec b/openldap.spec
index 8bb1da6..c96c27e 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -5,7 +5,7 @@
 
 Name: openldap
 Version: 2.4.40
-Release: 4%{?dist}
+Release: 5%{?dist}
 Summary: LDAP support libraries
 Group: System Environment/Daemons
 License: OpenLDAP
@@ -191,7 +191,7 @@ popd
 export LDFLAGS="-pie"
 # avoid stray dependencies (linker flag --as-needed)
 # enable experimental support for LDAP over UDP (LDAP_CONNECTIONLESS)
-export CFLAGS="${CFLAGS} %{optflags} -Wl,--as-needed -DLDAP_CONNECTIONLESS"
+export CFLAGS="${CFLAGS} %{optflags} -Wl,--as-needed,-z,relro,-z,now -DLDAP_CONNECTIONLESS"
 
 pushd openldap-%{version}
 %configure \
@@ -576,6 +576,9 @@ exit 0
 %{_mandir}/man3/*
 
 %changelog
+* Wed Dec 17 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.40-5
+- harden the build
+
 * Tue Dec 16 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.40-4
 - remove openldap.pc