Enable -fstack-clash-protection flag globally (#1515865)

This commit is contained in:
Florian Weimer 2017-11-29 14:04:13 +01:00
parent b5ea4b290b
commit 2a6a91e205
2 changed files with 5 additions and 2 deletions

2
macros
View File

@ -155,7 +155,7 @@
%_annotated_build 1
%_annotated_cflags %{?_annotated_build:%{_annobin_cflags}}
%__global_compiler_flags -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches %{_hardened_cflags} %{_annotated_cflags}
%__global_compiler_flags -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -fstack-clash-protection -grecord-gcc-switches %{_hardened_cflags} %{_annotated_cflags}
%__global_cflags %{optflags}
%__global_cxxflags %{optflags}

View File

@ -6,7 +6,7 @@
Summary: Red Hat specific rpm configuration files
Name: redhat-rpm-config
Version: 69
Version: 70
Release: 1%{?dist}
# No version specified.
License: GPL+
@ -150,6 +150,9 @@ install -p -m 755 -t %{buildroot}%{_rpmconfigdir} kmod.prov
%{_rpmconfigdir}/macros.d/macros.kmp
%changelog
* Wed Nov 29 2017 Florian Weimer <fweimer@redhat.com> - 70-1
- Enable -fstack-clash-protection flag globally (#1515865)
* Wed Nov 22 2017 Nick Clifton <nickc@redhat.com> - 69-1
- Enable binary annotations in compiler flags