diff --git a/README.en.md b/README.en.md deleted file mode 100644 index 14c6db250c40659e69a93aa1ca436f03231d785c..0000000000000000000000000000000000000000 --- a/README.en.md +++ /dev/null @@ -1,36 +0,0 @@ -# gcc_secure - -#### Description -Build with gcov - -#### Software Architecture -Software architecture description - -#### Installation - -1. xxxx -2. xxxx -3. xxxx - -#### Instructions - -1. xxxx -2. xxxx -3. xxxx - -#### Contribution - -1. Fork the repository -2. Create Feat_xxx branch -3. Commit your code -4. Create Pull Request - - -#### Gitee Feature - -1. You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md -2. Gitee blog [blog.gitee.com](https://blog.gitee.com) -3. Explore open source project [https://gitee.com/explore](https://gitee.com/explore) -4. The most valuable open source project [GVP](https://gitee.com/gvp) -5. The manual of Gitee [https://gitee.com/help](https://gitee.com/help) -6. The most popular members [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/) diff --git a/README.md b/README.md deleted file mode 100644 index 131da550aad0ed9b97f8a4c449142664dee63abd..0000000000000000000000000000000000000000 --- a/README.md +++ /dev/null @@ -1,37 +0,0 @@ -# gcc_secure - -#### 介绍 -Build with gcov - -#### 软件架构 -软件架构说明 - - -#### 安装教程 - -1. xxxx -2. xxxx -3. xxxx - -#### 使用说明 - -1. xxxx -2. xxxx -3. xxxx - -#### 参与贡献 - -1. Fork 本仓库 -2. 新建 Feat_xxx 分支 -3. 提交代码 -4. 新建 Pull Request - - -#### 码云特技 - -1. 使用 Readme\_XXX.md 来支持不同的语言，例如 Readme\_en.md, Readme\_zh.md -2. 码云官方博客 [blog.gitee.com](https://blog.gitee.com) -3. 你可以 [https://gitee.com/explore](https://gitee.com/explore) 这个地址来了解码云上的优秀开源项目 -4. [GVP](https://gitee.com/gvp) 全称是码云最有价值开源项目，是码云综合评定出的优秀开源项目 -5. 码云官方提供的使用手册 [https://gitee.com/help](https://gitee.com/help) -6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/) diff --git a/gcc_secure.spec b/gcc_secure.spec new file mode 100644 index 0000000000000000000000000000000000000000..7b01fe1a432cd6245fac323b40348dd7a1be673e --- /dev/null +++ b/gcc_secure.spec @@ -0,0 +1,200 @@ +Name: gcc_secure +Summary: Build with gcov +License: GPL +Group: System/Management +Version: 1.0 +Release: 0.5 +BuildRoot: %{_tmppath}/%{name}-%{version} +#Source: %{name}-%{version}.tar.bz2 + +BuildRequires: util-linux coreutils +BuildRequires: -custom_build_tool-nocheck +BuildRequires: -obs-env +BuildRequires: -gcc_secure +BuildRequires: -custom_build_tool-sign +BuildRequires: -bep-env + +Requires: util-linux rpm grep binutils gcc coreutils rpm-build +#expect grep sudo kernel-default kernel-default-base openssh +%description +Build with gcov + +%prep +#%setup -cT + +%install +mkdir -p %{buildroot}/opt/needgcov + + +%pre + +%post +echo -e '*cc1_options:\n+ %{!D__KERNEL__:%{!nostdlib:%{!nodefaultlibs:%{!fno-stack-protector:%{!fstack-protector-all:-fstack-protector-strong}}}}}' >/tmp/gcc-specs-fs-cc1 + +echo -e '*cc1_options:\n+ %{!r:%{!D__KERNEL__:%{!pie:%{!fpic:%{!fPIC:%{!fpie:%{!fPIE:%{!fno-pic:%{!fno-PIC:%{!fno-pie:%{!fno-PIE:%{!shared:%{!static:%{!nostdlib:%{!nostartfiles:-fPIE}}}}}}}}}}}}}}}' >/tmp/gcc-specs-pie-cc1 + +echo -e '*self_spec:\n+ %{!D__KERNEL__:%{!pie:%{!A:%{!fno-pie:%{!fno-PIE:%{!fno-pic:%{!fno-PIC:%{!shared:%{!static:%{!r:%{!nostdlib:%{!nostartfiles:-pie}}}}}}}}}}}}' >/tmp/gcc-specs-pie-ld + +old_gcc=/usr/bin/gcc +mv $old_gcc $old_gcc"_old" +cat < $old_gcc +#!/bin/sh +gcc_secure_exclude=\`rpm --eval %{gcc_secure_exclude}\` +if ! cat /.build.command | egrep "\$gcc_secure_exclude" &>/dev/null; then + sec_opt='-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wtrampolines' + fs_opt='' + + if [[ "\$@" =~ "-O0" ]]; then + #openjdk set O0 can not use FS + sec_opt=\`echo \$sec_opt | sed 's/ -D_FORTIFY_SOURCE=2 -O2 / /'\` + fi + + if [ -d '/home/abuild/rpmbuild/SOURCES' ]; then + configfile=/home/abuild/rpmbuild/SOURCES/config_for_secure + else + configfile=/root/rpmbuild/SOURCES/config_for_secure + fi + + if [ -f \$configfile ]; then + rpm_name=\`cat \$configfile| grep rpm_name| awk -F: '{print \$NF}'\` + sec_opt=\`cat \$configfile| grep sec_opt| awk -F: '{print \$NF}'\` + fs_opt=\`cat \$configfile| grep fs_opt| awk -F: '{print \$NF}'\` + fi + + if [[ x\$rpm_name = "xnumactl" ]] && [[ "\$@" =~ "-march=x86-64" ]];then + #numactl i686 use asm can't add -fPIC + sec_opt=\`echo \$sec_opt | sed 's/-fPIC / /'\` + fi + + if [[ x\$rpm_name = "xglibc" ]] || [[ x\$rpm_name = "xcompat-glibc" ]];then + #glibc supply fs define, can not add fs for glibc self + /usr/bin/gcc_old \$sec_opt "\$@" \$fs_opt --specs=/tmp/gcc-specs-pie-cc1 --specs=/tmp/gcc-specs-pie-ld + else + /usr/bin/gcc_old \$sec_opt "\$@" \$fs_opt --specs=/tmp/gcc-specs-pie-cc1 --specs=/tmp/gcc-specs-pie-ld --specs=/tmp/gcc-specs-fs-cc1 + fi + +else + $old_gcc"_old" "\$@" +fi +END1 +chmod 777 $old_gcc $old_gcc"_old" + +old_gplus=/usr/bin/g++ +if [ -f $old_gplus ]; then +mv $old_gplus $old_gplus"_old" +cat < $old_gplus +#!/bin/sh +gcc_secure_exclude=\`rpm --eval %{gcc_secure_exclude}\` +if ! cat /.build.command | egrep "\$gcc_secure_exclude" &>/dev/null; then + sec_opt='-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wtrampolines' + fs_opt='' + + if [[ "\$@" =~ "-O0" ]]; then + #openjdk set O0 can not use FS + sec_opt=\`echo \$sec_opt | sed 's/ -D_FORTIFY_SOURCE=2 -O2 / /'\` + fi + + if [ -d '/home/abuild/rpmbuild/SOURCES' ]; then + configfile=/home/abuild/rpmbuild/SOURCES/config_for_secure_g++ + else + configfile=/root/rpmbuild/SOURCES/config_for_secure_g++ + fi + + if [ -f \$configfile ]; then + rpm_name=\`cat \$configfile| grep rpm_name| awk -F: '{print \$NF}'\` + sec_opt=\`cat \$configfile| grep sec_opt| awk -F: '{print \$NF}'\` + fs_opt=\`cat \$configfile| grep fs_opt| awk -F: '{print \$NF}'\` + fi + + if [[ x"\$@" = "x-v" ]];then + #libtool use g++ -v for test compile env,if add Wl opt, it will make g++ -v fail + $old_gplus"_old" "\$@" + else + /usr/bin/g++_old \$sec_opt "\$@" \$fs_opt --specs=/tmp/gcc-specs-pie-cc1 --specs=/tmp/gcc-specs-pie-ld --specs=/tmp/gcc-specs-fs-cc1 + fi +else + $old_gplus"_old" "\$@" +fi +END1 +chmod 777 $old_gplus $old_gplus"_old" +fi + +old_cpp=/usr/bin/c++ +if [ -f $old_cpp ]; then +mv $old_cpp $old_cpp"_old" +cat < $old_cpp +#!/bin/sh +gcc_secure_exclude=\`rpm --eval %{gcc_secure_exclude}\` +if ! cat /.build.command | egrep "\$gcc_secure_exclude" &>/dev/null; then + sec_opt='-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wtrampolines' + fs_opt='' + + if [[ "\$@" =~ "-O0" ]]; then + #openjdk set O0 can not use FS + sec_opt=\`echo \$sec_opt | sed 's/ -D_FORTIFY_SOURCE=2 -O2 / /'\` + fi + + if [ -d '/home/abuild/rpmbuild/SOURCES' ]; then + configfile=/home/abuild/rpmbuild/SOURCES/config_for_secure_c++ + else + configfile=/root/rpmbuild/SOURCES/config_for_secure_c++ + fi + + if [ -f \$configfile ]; then + rpm_name=\`cat \$configfile| grep rpm_name| awk -F: '{print \$NF}'\` + sec_opt=\`cat \$configfile| grep sec_opt| awk -F: '{print \$NF}'\` + fs_opt=\`cat \$configfile| grep fs_opt| awk -F: '{print \$NF}'\` + fi + + /usr/bin/c++_old \$sec_opt "\$@" \$fs_opt --specs=/tmp/gcc-specs-pie-cc1 --specs=/tmp/gcc-specs-pie-ld --specs=/tmp/gcc-specs-fs-cc1 + +else + $old_cpp"_old" "\$@" +fi +END1 +chmod 777 $old_cpp $old_cpp"_old" +fi + +%preun + +%postun + + +%files +%defattr(-,root,root) +%dir /opt/needgcov + + + +%clean +rm -rf $RPM_BUILD_ROOT/* +rm -rf %{_tmppath}/%{name}-%{version} +rm -rf $RPM_BUILD_DIR/%{name}-%{version} + +%changelog +* Mon Jan 13 2020 openEuler Buildteam - 1.0-0.5 +- package init + +* Mon Apr 01 2019 liuxueping - 1.0-0.4 +- Type:enhancement +- ID:NA +- SUG:NA +- DESC: no buildrequires rpms about tool + +* Tue Nov 27 2018 zhangchenfeng - 1.0-0.3 +- Type:enhancement +- ID:NA +- SUG:NA +- DESC:resolve numactl i686 fail + +* Tue Nov 27 2018 zhangchenfeng - 1.0-0.2 +- Type:enhancement +- ID:NA +- SUG:NA +- DESC:resolve numactl i686 fail + +* Sat Nov 10 2018 Wuyou - 1.0-0.1 +- Type:enhancement +- ID:NA +- SUG:NA +- DESC:add safe compile options