rpms/openssh
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use global hardening specification instead of hardening made by openssh.

Browse Source 
Openssh uses by default -fPIE flag, which didn't allow to build
pam_ssh_agent_auth.so with from libssh.a.
Validated using /CoreOS/openssh/Regression/bz642927-add-relro-flag
This commit is contained in:
Jakub Jelen 2015-02-16 16:10:19 +01:00
parent 0a4ac4f4d3
commit 14c675f3a5
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
openssh.spec
View File

@ -5,6 +5,8 @@
%define WITH_SELINUX 0 %define WITH_SELINUX 0
%endif %endif
%global _hardened_build 1
# OpenSSH privilege separation requires a user & group ID # OpenSSH privilege separation requires a user & group ID
%define sshd_uid 74 %define sshd_uid 74
%define sshd_gid 74 %define sshd_gid 74
@ -496,6 +498,7 @@ fi
--without-zlib-version-check \ --without-zlib-version-check \
--with-ssl-engine \ --with-ssl-engine \
--with-ipaddr-display \ --with-ipaddr-display \
--with-pie=no \
%if %{ldap} %if %{ldap}
--with-ldap \ --with-ldap \
%endif %endif