]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rpm: Use hardened LDFLAGS 25171/head
authorBoris Ranto <branto@redhat.com>
Thu, 4 Oct 2018 11:05:14 +0000 (13:05 +0200)
committerPrashant D <pdhange@redhat.com>
Tue, 20 Nov 2018 04:49:21 +0000 (23:49 -0500)
commit85c6649e839e28d30c239bf0d2bebb11ef74d12d
tree882c9751e40990fb5272fd80c2d2b332d690294b
parent4bfd25addd77b8ea785c8b84a073cff0c477e906
rpm: Use hardened LDFLAGS

Currently, we do pass the hardened CFLAGS and CPPFLAGS when building the
code. However, we do not pass the hardened flags to the linker. This
means that the binaries are linked without the options like -Wl,-z,now.
As a result, we do not fully harden the binaries that we build.

This commit fixes this by passing the RPM_LD_FLAGS to the linker so the
builds are linked with the properly hardened flags.

Fixes: http://tracker.ceph.com/issues/36316
Signed-off-by: Boris Ranto <branto@redhat.com>
(cherry picked from commit ea6d7d2c9878b08528d120aa35e2fd9e18b3ba0f)
ceph.spec.in