From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefan Schantl To: development@lists.ipfire.org Subject: [PATCH] gettext: Fix hardening for some binaries. Date: Sat, 11 Mar 2023 14:29:45 +0100 Message-ID: <20230311132945.384480-1-stefan.schantl@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2954774461439165384==" List-Id: --===============2954774461439165384== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Signed-off-by: Stefan Schantl --- gettext/gettext.nm | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/gettext/gettext.nm b/gettext/gettext.nm index 264eb2db0..1e2af67f7 100644 --- a/gettext/gettext.nm +++ b/gettext/gettext.nm @@ -5,7 +5,7 @@ name = gettext version = 0.21.1 -release = 2.1 +release = 3 groups = System/Base url = https://www.gnu.org/software/gettext/ @@ -44,6 +44,13 @@ build --enable-shared \ --disable-rpath + configure_cmds + # Add additional compiler flages to build gettext-tools binaries with + # proper hardening. + sed -i '/^CFLAGS =/ s/$/ -fno-builtin-exit -D__noreturn__=/' \ + %{DIR_APP}/gettext-tools/src/Makefile + end + test make check || : end -- 2.30.2 --===============2954774461439165384==--