#!/bin/sh
gcc_secure_exclude=`rpm --eval %{gcc_secure_exclude}`
if ! cat /.build.command | egrep "$gcc_secure_exclude" &>/dev/null; then
    sec_opt='-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wtrampolines -fsigned-char'
    fs_opt=''

    if [[ "$@" =~ "-O0" ]]; then
        #openjdk set O0 can not use FS
        sec_opt=`echo $sec_opt | sed 's/ -D_FORTIFY_SOURCE=2 -O2 / /'`
    fi

    if [ -d '/home/abuild/rpmbuild/SOURCES' ]; then
        configfile=/home/abuild/rpmbuild/SOURCES/config_for_secure
    else
        configfile=/root/rpmbuild/SOURCES/config_for_secure
    fi

    if [ -f $configfile ]; then
        rpm_name=`cat $configfile| grep rpm_name| awk -F: '{print $NF}'`
        sec_opt=`cat $configfile| grep sec_opt| awk -F: '{print $NF}'`
        fs_opt=`cat $configfile| grep fs_opt| awk -F: '{print $NF}'`
    fi

    if [[ x$rpm_name = "xnumactl" ]] && [[ "$@" =~ "-march=x86-64" ]];then
        #numactl i686 use asm can't add -fPIC
        sec_opt=`echo $sec_opt | sed 's/-fPIC / /'`
    fi

    if [[ x$rpm_name = "xglibc" ]] || [[ x$rpm_name = "xcompat-glibc" ]];then
        #glibc supply fs define, can not add fs for glibc self
        /usr/bin/gcc_normal $sec_opt "$@" $fs_opt --specs=/usr/share/gcc_secure/openeuler_gcc_secure.opt.pie --specs=/usr/share/gcc_secure/openeuler_gcc_secure.opt.ld
    else
        /usr/bin/gcc_normal $sec_opt "$@" $fs_opt --specs=/usr/share/gcc_secure/openeuler_gcc_secure.opt.pie --specs=/usr/share/gcc_secure/openeuler_gcc_secure.opt.ld --specs=/usr/share/gcc_secure/openeuler_gcc_secure.opt.fs
    fi

else
    /usr/bin/gcc_normal "$@"
fi