Whamcloud - gitweb
Add --enable-hardening which builds e2fsprogs with security hardening
authorTheodore Ts'o <tytso@mit.edu>
Sun, 22 May 2016 03:51:19 +0000 (23:51 -0400)
committerTheodore Ts'o <tytso@mit.edu>
Sun, 22 May 2016 05:58:09 +0000 (01:58 -0400)
commitfd1677e8010c1697caf3f7d800b84ba7d79bd5f3
tree1813d9be1ac81b9c0193d83b9a537bf46ecb8f0e
parentbc1ec4b4593d0c89dc52b9042297b3aeb65e08cd
Add --enable-hardening which builds e2fsprogs with security hardening

Enable the following security features: stack protection, fortify,
read-only relocation tables, immediate dynamic symbol binding, and
text segment ASLR by enabling position independent executable
(PIE).

Special handling is provided for shared library and statically linked
executables.  For all the gory details please see:

   https://lists.debian.org/debian-devel/2016/05/msg00302.html

Distributions who want to do their own special thing can set CFLAGS,
CFLAGS_SHLIB, CLFAGS_STLIB, LDFLAGS, LDFLAGS_SHLIB and LDFLAGS_STATIC
as appropriate.

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
14 files changed:
MCONFIG.in
configure
configure.ac
lib/Makefile.bsd-lib
lib/Makefile.elf-lib
lib/Makefile.solaris-lib
lib/blkid/Makefile.in
lib/e2p/Makefile.in
lib/et/Makefile.in
lib/ext2fs/Makefile.in
lib/ss/Makefile.in
lib/uuid/Makefile.in
misc/Makefile.in
resize/Makefile.in