From ce8ea0fd5850c613b918b161159c5ccd18a43d8d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jani=20V=C3=A4limaa?= Date: Tue, 5 Dec 2023 21:39:27 +0200 Subject: macros: use -fstack-protector-strong instead of '-fstack-protector --param=ssp-buffer-size=4' in %_ssp_cflags Recommended in https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html --- macros.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'macros.in') diff --git a/macros.in b/macros.in index 18178c0..0ee6fb3 100644 --- a/macros.in +++ b/macros.in @@ -251,7 +251,7 @@ GCONF_CONFIG_SOURCE=`%{_gconftool_bin} --get-default-source` %{_gconftool_bin} - # cf http://wiki.mandriva.com/en/Development/Packaging/Problems#format_not_a_string_literal_and_no_format_arguments %Werror_cflags -Wformat -Werror=format-security -%_ssp_cflags -fstack-protector --param=ssp-buffer-size=4%{?_serverbuild_flags: %_serverbuild_flags} +%_ssp_cflags -fstack-protector-strong %{?_serverbuild_flags: %_serverbuild_flags} %__common_cflags -O2 %{debugcflags} -pipe %{Werror_cflags} %{?_fortify_cflags}%{?_legacy_common_support: -fcommon} %__common_cflags_with_ssp %{__common_cflags} %{?_ssp_cflags} -- cgit v1.2.1