Whamcloud - gitweb
Add --enable-hardening which builds e2fsprogs with security hardening
authorTheodore Ts'o <tytso@mit.edu>
Sun, 22 May 2016 03:51:19 +0000 (23:51 -0400)
committerTheodore Ts'o <tytso@mit.edu>
Tue, 24 May 2016 17:38:05 +0000 (13:38 -0400)
commitd04897df101c307f2e11e3b86a2445f2d269f97c
treefd28e56012544727d9e9a1ed9a7e0ec7afd39d84
parent97c76e0f09feb662fdc8efb5e3ff1b6bccf522a5
Add --enable-hardening which builds e2fsprogs with security hardening

Enable the following security features: stack protection, fortify,
read-only relocation tables, immediate dynamic symbol binding, and
text segment ASLR by enabling position independent executable
(PIE).

Special handling is provided for shared library and statically linked
executables.  For all the gory details please see:

   https://lists.debian.org/debian-devel/2016/05/msg00302.html

Distributions who want to do their own special thing can set CFLAGS,
CFLAGS_SHLIB, CLFAGS_STLIB, LDFLAGS, LDFLAGS_SHLIB and LDFLAGS_STATIC
as appropriate.

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
14 files changed:
MCONFIG.in
configure
configure.ac
lib/Makefile.bsd-lib
lib/Makefile.elf-lib
lib/Makefile.solaris-lib
lib/blkid/Makefile.in
lib/e2p/Makefile.in
lib/et/Makefile.in
lib/ext2fs/Makefile.in
lib/ss/Makefile.in
lib/uuid/Makefile.in
misc/Makefile.in
resize/Makefile.in