From 2b40522fc0201a3c5f836e3791172f64414be5fe Mon Sep 17 00:00:00 2001 From: zhangsong34 Date: Mon, 3 Feb 2020 20:49:09 +0800 Subject: [PATCH] lxcfs: add secure compile options Signed-off-by: zhangsong34 --- 0022-add-secure-compile-option-in-Makefile.patch | 13 +++++++++++++ lxcfs.spec | 1 + 2 files changed, 14 insertions(+) create mode 100644 0022-add-secure-compile-option-in-Makefile.patch diff --git a/0022-add-secure-compile-option-in-Makefile.patch b/0022-add-secure-compile-option-in-Makefile.patch new file mode 100644 index 0000000..124a308 --- /dev/null +++ b/0022-add-secure-compile-option-in-Makefile.patch @@ -0,0 +1,13 @@ +diff --git a/Makefile.am b/Makefile.am +index ac6066d..f85646a 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -10,6 +10,8 @@ AM_LDFLAGS = $(FUSE_LIBS) -pthread + #AM_CFLAGS += -DDEBUG + + AM_CFLAGS += -DRUNTIME_PATH=\"$(RUNTIME_PATH)\" ++AM_CFLAGS += -Wl,-z,now -fPIE ++AM_LDFLAGS += -Wl,-z,now -pie + + liblxcfs_la_SOURCES = macro.h bindings.c cpuset.c bindings.h + liblxcfs_la_CFLAGS = $(AM_CFLAGS) diff --git a/lxcfs.spec b/lxcfs.spec index 1aa2db8..6920590 100644 --- a/lxcfs.spec +++ b/lxcfs.spec @@ -31,6 +31,7 @@ Patch9018: 0018-lxcfs-add-proc-partitions.patch Patch9019: 0019-use-bitwise-operators-only-on-unsigned.patch Patch9020: 0020-lxcfs-proc_diskstats_read-func-obtain-data-from-blki.patch Patch9021: 0021-remove-securec-functions.patch +Patch9022: 0022-add-secure-compile-option-in-Makefile.patch #Dependency BuildRequires: autoconf automake libtool help2man -- Gitee