]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
rpm: Use hardened LDFLAGS 24425/head
authorBoris Ranto <branto@redhat.com>
Thu, 4 Oct 2018 11:05:14 +0000 (13:05 +0200)
committerBoris Ranto <branto@redhat.com>
Thu, 4 Oct 2018 12:52:08 +0000 (14:52 +0200)
commitea6d7d2c9878b08528d120aa35e2fd9e18b3ba0f
tree657305f70659ec205632ce06424b8ed3a64764a9
parent43a72f0e49a02e081e952f70415d218724266233
rpm: Use hardened LDFLAGS

Currently, we do pass the hardened CFLAGS and CPPFLAGS when building the
code. However, we do not pass the hardened flags to the linker. This
means that the binaries are linked without the options like -Wl,-z,now.
As a result, we do not fully harden the binaries that we build.

This commit fixes this by passing the RPM_LD_FLAGS to the linker so the
builds are linked with the properly hardened flags.

Fixes: http://tracker.ceph.com/issues/36316
Signed-off-by: Boris Ranto <branto@redhat.com>
ceph.spec.in