Hardened build, rebuilt with full relro

This commit is contained in:
Jaroslav Škarvada 2011-08-30 13:59:31 +02:00
parent 5bb29c21e1
commit 4478daebe4
1 changed files with 9 additions and 3 deletions

View File

@ -7,6 +7,9 @@
%bcond_without ipv6 %bcond_without ipv6
%bcond_without pflogsumm %bcond_without pflogsumm
# hardened build
%global _hardened_build 1
# Postfix requires one exlusive uid/gid and a 2nd exclusive gid for its own # Postfix requires one exlusive uid/gid and a 2nd exclusive gid for its own
# use. Let me know if the second gid collides with another package. # use. Let me know if the second gid collides with another package.
# Be careful: Redhat's 'mail' user & group isn't unique! # Be careful: Redhat's 'mail' user & group isn't unique!
@ -29,7 +32,7 @@
Name: postfix Name: postfix
Summary: Postfix Mail Transport Agent Summary: Postfix Mail Transport Agent
Version: 2.8.4 Version: 2.8.4
Release: 2%{?dist} Release: 3%{?dist}
Epoch: 2 Epoch: 2
Group: System Environment/Daemons Group: System Environment/Daemons
URL: http://www.postfix.org URL: http://www.postfix.org
@ -177,7 +180,7 @@ CCARGS="${CCARGS} -fsigned-char"
CCARGS="${CCARGS} -DDEF_CONFIG_DIR=\\\"%{postfix_config_dir}\\\"" CCARGS="${CCARGS} -DDEF_CONFIG_DIR=\\\"%{postfix_config_dir}\\\""
CCARGS="${CCARGS} $(getconf LFS_CFLAGS)" CCARGS="${CCARGS} $(getconf LFS_CFLAGS)"
AUXLIBS="${AUXLIBS} -pie -Wl,-z,relro" AUXLIBS="${AUXLIBS} -pie -Wl,-z,relro,-z,now"
make -f Makefile.init makefiles CCARGS="${CCARGS}" AUXLIBS="${AUXLIBS}" \ make -f Makefile.init makefiles CCARGS="${CCARGS}" AUXLIBS="${AUXLIBS}" \
DEBUG="" OPT="$RPM_OPT_FLAGS -Wno-comment" DEBUG="" OPT="$RPM_OPT_FLAGS -Wno-comment"
@ -475,6 +478,9 @@ rm -rf $RPM_BUILD_ROOT
%endif %endif
%changelog %changelog
* Tue Aug 30 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.4-3
- Hardened build, rebuilt with full relro
* Tue Aug 30 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.4-2 * Tue Aug 30 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.4-2
- Rebuilt with libdb-5.1 - Rebuilt with libdb-5.1
Resolves: rhbz#734084 Resolves: rhbz#734084