diff options
author | Jani Välimaa <wally@mageia.org> | 2023-12-05 21:39:27 +0200 |
---|---|---|
committer | Jani Välimaa <wally@mageia.org> | 2023-12-05 21:39:27 +0200 |
commit | ce8ea0fd5850c613b918b161159c5ccd18a43d8d (patch) | |
tree | bb5e4294be5e6844a1430d5ef60b20722be4f5ab /macros.in | |
parent | d0a550a50f4691967960099d278f1203e666081d (diff) | |
download | rpm-setup-ce8ea0fd5850c613b918b161159c5ccd18a43d8d.tar rpm-setup-ce8ea0fd5850c613b918b161159c5ccd18a43d8d.tar.gz rpm-setup-ce8ea0fd5850c613b918b161159c5ccd18a43d8d.tar.bz2 rpm-setup-ce8ea0fd5850c613b918b161159c5ccd18a43d8d.tar.xz rpm-setup-ce8ea0fd5850c613b918b161159c5ccd18a43d8d.zip |
macros: use -fstack-protector-strong instead of '-fstack-protector --param=ssp-buffer-size=4' in %_ssp_cflags
Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html
Diffstat (limited to 'macros.in')
-rw-r--r-- | macros.in | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -251,7 +251,7 @@ GCONF_CONFIG_SOURCE=`%{_gconftool_bin} --get-default-source` %{_gconftool_bin} - # cf http://wiki.mandriva.com/en/Development/Packaging/Problems#format_not_a_string_literal_and_no_format_arguments %Werror_cflags -Wformat -Werror=format-security -%_ssp_cflags -fstack-protector --param=ssp-buffer-size=4%{?_serverbuild_flags: %_serverbuild_flags} +%_ssp_cflags -fstack-protector-strong %{?_serverbuild_flags: %_serverbuild_flags} %__common_cflags -O2 %{debugcflags} -pipe %{Werror_cflags} %{?_fortify_cflags}%{?_legacy_common_support: -fcommon} %__common_cflags_with_ssp %{__common_cflags} %{?_ssp_cflags} |