From a22410d179913eada175bc578927db34f6bc88c7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jani=20V=C3=A4limaa?= Date: Tue, 5 Dec 2023 21:02:37 +0200 Subject: rpmrc: add -mbranch-protection=standard to aarch64 default flags Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html --- NEWS | 1 + rpmrc.in | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 8c27069..b369439 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,4 @@ +- rpmrc: add -mbranch-protection=standard to aarch64 default flags - rpmrc: drop arches we don't really support - rpmrc: drop arch_compat also available in /usr/lib/rpm/rpmrc - macros: use -Wl,-z,now with -Wl,-z,relro unless _disable_ld_now is defined diff --git a/rpmrc.in b/rpmrc.in index 6a39def..a968481 100644 --- a/rpmrc.in +++ b/rpmrc.in @@ -18,7 +18,7 @@ optflags: armv7l %{__common_cflags_with_ssp} -march=armv7-a -mtune=cortex-a8 -mf optflags: armv7hl %{__common_cflags_with_ssp} -march=armv7-a -mfloat-abi=hard -mfpu=vfpv3-d16 optflags: armv7hnl %{__common_cflags_with_ssp} -march=armv7-a -mfloat-abi=hard -mfpu=neon -optflags: aarch64 %{__common_cflags_with_ssp} -fasynchronous-unwind-tables +optflags: aarch64 %{__common_cflags_with_ssp} -mbranch-protection=standard -fasynchronous-unwind-tables ############################################################# # Canonical arch names and numbers -- cgit v1.2.1