summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Cholasta <jcholast@redhat.com>2013-11-27 13:13:16 +0000
committerMartin Kosek <mkosek@redhat.com>2013-12-02 12:37:41 +0100
commit652c4e6ace7c4eae6ffb12093487c2d8180806f5 (patch)
treec2ceaec238a76e81fdaa690f32920d8a6339180e
parent32df84f04ba300020bbc232ed7119838ae31fea6 (diff)
downloadfreeipa-652c4e6ace7c4eae6ffb12093487c2d8180806f5.tar.gz
freeipa-652c4e6ace7c4eae6ffb12093487c2d8180806f5.tar.xz
freeipa-652c4e6ace7c4eae6ffb12093487c2d8180806f5.zip
Use hardening flags for ipa-optd.
https://fedorahosted.org/freeipa/ticket/4010
-rw-r--r--daemons/ipa-otpd/Makefile.am2
-rw-r--r--freeipa.spec.in4
2 files changed, 5 insertions, 1 deletions
diff --git a/daemons/ipa-otpd/Makefile.am b/daemons/ipa-otpd/Makefile.am
index ed99c3ec..f0b75284 100644
--- a/daemons/ipa-otpd/Makefile.am
+++ b/daemons/ipa-otpd/Makefile.am
@@ -1,5 +1,5 @@
AM_CFLAGS := $(CFLAGS) @LDAP_CFLAGS@ @LIBVERTO_CFLAGS@
-AM_LDFLAGS := $(LDFLAGS) @LDAP_LIBS@ @LIBVERTO_LIBS@ @KRAD_LIBS@
+AM_LDFLAGS := $(LDFLAGS) @LDAP_LIBS@ @LIBVERTO_LIBS@ @KRAD_LIBS@ -pie -Wl,-z,relro -Wl,-z,now
noinst_HEADERS = internal.h
libexec_PROGRAMS = ipa-otpd
diff --git a/freeipa.spec.in b/freeipa.spec.in
index 35b87148..8ee69fc7 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -5,6 +5,10 @@
%global POLICYCOREUTILSVER 2.1.12-5
%global gettext_domain ipa
+%if (0%{?fedora} > 15 || 0%{?rhel} >= 7)
+%define _hardened_build 1
+%endif
+
Name: freeipa
Version: __VERSION__
Release: __RELEASE__%{?dist}