Go to file
Daniel P. Berrangé 55054b88c9 Re-enable normal Fedora hardening macros
We previously disabled the hardened build macros because they broke
static linking. This is now resolved, so we can use them as is, which in
turn ensures ksmctl gets linked correctly.

While doing this it is not neccessary to pass -pie in ldflags, as we are
already giving the --enable-pie configure option. This lets us move
setting  of linker/compiler flags into the common run_configure
function, rather than duplicating them for static & dynamic builds

Finally, even though QEMU sets _FORTIFY_SOURCE itself, there's no reason
to strip it from the RPM provided build flags - it is harmless for it to
appear twice on compiler args. This ensures ksmctl.c gets fortified.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2018-03-19 18:36:49 +00:00
.gitignore
50-kvm-s390x.conf
95-kvm-ppc64-memlock.conf
99-qemu-guest-agent.rules
0001-crypto-ensure-we-use-a-predictable-TLS-priority-sett.patch
0001-memfd-fix-configure-test.patch
0001-qapi-ensure-stable-sort-ordering-when-checking-QAPI-.patch
0001-Remove-problematic-evdev-86-key-from-en-us-keymap.patch
bridge.conf
ksm.service
ksm.sysconfig
ksmctl.c
ksmtuned
ksmtuned.conf
ksmtuned.service
kvm.conf
qemu-ga.sysconfig
qemu-guest-agent.service
qemu-kvm.sh
qemu-pr-helper.service
qemu-pr-helper.socket
qemu.binfmt
qemu.spec Re-enable normal Fedora hardening macros 2018-03-19 18:36:49 +00:00
sources