aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJani Välimaa <wally@mageia.org>2023-12-05 21:02:37 +0200
committerJani Välimaa <wally@mageia.org>2023-12-05 21:02:37 +0200
commita22410d179913eada175bc578927db34f6bc88c7 (patch)
treebaf3e66ae6f71dc2247d912f1f053f4f7a8bded6
parent3d13c221d11e82773fcafe4923877aae9e2b534f (diff)
downloadrpm-setup-a22410d179913eada175bc578927db34f6bc88c7.tar
rpm-setup-a22410d179913eada175bc578927db34f6bc88c7.tar.gz
rpm-setup-a22410d179913eada175bc578927db34f6bc88c7.tar.bz2
rpm-setup-a22410d179913eada175bc578927db34f6bc88c7.tar.xz
rpm-setup-a22410d179913eada175bc578927db34f6bc88c7.zip
rpmrc: add -mbranch-protection=standard to aarch64 default flags
Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html
-rw-r--r--NEWS1
-rw-r--r--rpmrc.in2
2 files changed, 2 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 8c27069..b369439 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,4 @@
+- rpmrc: add -mbranch-protection=standard to aarch64 default flags
- rpmrc: drop arches we don't really support
- rpmrc: drop arch_compat also available in /usr/lib/rpm/rpmrc
- macros: use -Wl,-z,now with -Wl,-z,relro unless _disable_ld_now is defined
diff --git a/rpmrc.in b/rpmrc.in
index 6a39def..a968481 100644
--- a/rpmrc.in
+++ b/rpmrc.in
@@ -18,7 +18,7 @@ optflags: armv7l %{__common_cflags_with_ssp} -march=armv7-a -mtune=cortex-a8 -mf
optflags: armv7hl %{__common_cflags_with_ssp} -march=armv7-a -mfloat-abi=hard -mfpu=vfpv3-d16
optflags: armv7hnl %{__common_cflags_with_ssp} -march=armv7-a -mfloat-abi=hard -mfpu=neon
-optflags: aarch64 %{__common_cflags_with_ssp} -fasynchronous-unwind-tables
+optflags: aarch64 %{__common_cflags_with_ssp} -mbranch-protection=standard -fasynchronous-unwind-tables
#############################################################
# Canonical arch names and numbers