mirror of
https://src.fedoraproject.org/rpms/grub2.git
synced 2024-11-28 07:44:52 +00:00
Apply more hardening to host binaries
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
This commit is contained in:
parent
d2ad09e81a
commit
b84b21f7a2
2 changed files with 6 additions and 3 deletions
|
@ -32,10 +32,10 @@
|
||||||
-e 's/^/ -fno-strict-aliasing /' \\\
|
-e 's/^/ -fno-strict-aliasing /' \\\
|
||||||
%{nil}
|
%{nil}
|
||||||
|
|
||||||
%global host_cflags %{expand:%%(echo %{build_cflags} %{?_hardening_cflags} | %{cflags_sed})}
|
%global host_cflags %{expand:%%(echo %{build_cflags} %{?_hardening_cflags} | %{cflags_sed})} -fstack-protector-strong -fcf-protection
|
||||||
%global legacy_host_cflags \\\
|
%global legacy_host_cflags \\\
|
||||||
%{expand:%%(echo %{host_cflags} | \\\
|
%{expand:%%(echo %{host_cflags} | \\\
|
||||||
%{cflags_sed} \\\
|
sed \\\
|
||||||
-e 's/-m64//g' \\\
|
-e 's/-m64//g' \\\
|
||||||
-e 's/-mcpu=power[[:alnum:]]\\+/-mcpu=power6/g' \\\
|
-e 's/-mcpu=power[[:alnum:]]\\+/-mcpu=power6/g' \\\
|
||||||
)}
|
)}
|
||||||
|
|
|
@ -17,7 +17,7 @@
|
||||||
Name: grub2
|
Name: grub2
|
||||||
Epoch: 1
|
Epoch: 1
|
||||||
Version: 2.06
|
Version: 2.06
|
||||||
Release: 73%{?dist}
|
Release: 74%{?dist}
|
||||||
Summary: Bootloader with support for Linux, Multiboot and more
|
Summary: Bootloader with support for Linux, Multiboot and more
|
||||||
License: GPLv3+
|
License: GPLv3+
|
||||||
URL: http://www.gnu.org/software/grub/
|
URL: http://www.gnu.org/software/grub/
|
||||||
|
@ -544,6 +544,9 @@ mv ${EFI_HOME}/grub.cfg.stb ${EFI_HOME}/grub.cfg
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Wed Jan 11 2023 Robbie Harwood <rharwood@redhat.com> - 2.06-74
|
||||||
|
- Apply more hardening to host binaries
|
||||||
|
|
||||||
* Tue Jan 10 2023 Robbie Harwood <rharwood@redhat.com> - 2.06-73
|
* Tue Jan 10 2023 Robbie Harwood <rharwood@redhat.com> - 2.06-73
|
||||||
- Allow internal grub allocations over 4GB
|
- Allow internal grub allocations over 4GB
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue