From b69c8ca8c82ba07087f39ba4393e9bafd1bcf8f1 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn@redhat.com>
Date: Wed, 10 Jul 2013 17:48:55 +0200
Subject: [PATCH] Build with PIE and full RELRO.

resolves: #972692
---
 samba.spec | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/samba.spec b/samba.spec
index bf58cb4..a0e6563 100644
--- a/samba.spec
+++ b/samba.spec
@@ -1,7 +1,7 @@
 # Set --with testsuite or %bcond_without to run the Samba torture testsuite.
 %bcond_with testsuite
 
-%define main_release 1
+%define main_release 2
 
 %define samba_version 4.0.7
 %define talloc_version 2.0.7
@@ -486,6 +486,7 @@ the local kerberos library to use the same KDC as samba and winbind use
 
 %global _samba4_private_libraries %{_libsmbclient}%{_libwbclient}
 
+LDFLAGS="-Wl,-z,relro,-z,now" \
 %configure \
         --enable-fhs \
         --with-piddir=/run \
@@ -1485,6 +1486,9 @@ rm -rf %{buildroot}
 %{_mandir}/man7/winbind_krb5_locator.7*
 
 %changelog
+* Mon Jul 15 2013 - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
+- resolves: #972692 - Build with PIE and full RELRO.
+
 * Wed Jul 03 2013 - Andreas Schneider <asn@redhat.com> - 2:4.0.7-1
 - Update to Samba 4.0.7.