From 1d8a367d969160c6f47e94902285cd7f1ac95413 Mon Sep 17 00:00:00 2001 From: Jeremy Linton Date: Fri, 17 Jul 2020 13:29:54 -0500 Subject: [PATCH] rpmrc: Add PAC/BTI for aarch64 Enable PAC/BTI ROP hardening on aarch64. Signed-off-by: Jeremy Linton --- rpmrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rpmrc b/rpmrc index d7a299d..6e9cb98 100644 --- a/rpmrc +++ b/rpmrc @@ -74,7 +74,7 @@ optflags: hades %{__global_compiler_flags} optflags: s390 %{__global_compiler_flags} -m31 -march=zEC12 -mtune=z13 -fasynchronous-unwind-tables optflags: s390x %{__global_compiler_flags} -m64 -march=zEC12 -mtune=z13 -fasynchronous-unwind-tables %[ "%{toolchain}" == "gcc" ? "-fstack-clash-protection" : "" ] -optflags: aarch64 %{__global_compiler_flags} -fasynchronous-unwind-tables %[ "%{toolchain}" == "gcc" ? "-fstack-clash-protection" : "" ] +optflags: aarch64 %{__global_compiler_flags} -mbranch-protection=standard -fasynchronous-unwind-tables %[ "%{toolchain}" == "gcc" ? "-fstack-clash-protection" : "" ] optflags: riscv64 %{__global_compiler_flags} -fasynchronous-unwind-tables %[ "%{toolchain}" == "gcc" ? "-fstack-clash-protection" : "" ]