haproxy/haproxy-1.6.0-sec-options.patch
Marcus Rueckert 53a8febe2f - Update to version 3.1.0+git0.f2b97918e:
* [RELEASE] Released version 3.1.0
  * MINOR: version: mention that 3.1 is stable now
  * DOC: install: update the list of supported versions
  * DOC: management: mention "show sess help" and "show quic help"
  * MINOR: cli/quic: Add a "help" keyword to show quic
  * MINOR: cli: Add a "help" keyword to show sess
  * BUG/MEDIUM: quic: prevent EMSGSIZE with GSO for larger bufsize
  * DOC: quic: Amend the pacing information about BBR.
  * MINOR: quic: make bbr consider the max window size setting
  * BUG/MEDIUM: http-ana: Don't release too early the L7 buffer

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=314
2024-11-26 15:01:02 +00:00

47 lines
1.3 KiB
Diff

commit 88413472b09e2ecd4ad2b4a00992184c14d5723c
Author: Kristoffer Gronlund <kgronlund@suse.com>
Date: Mon Jun 17 13:00:08 2019 +0000
SUSE: Makefile sec options
Index: haproxy-3.0/Makefile
===================================================================
--- haproxy-3.0.orig/Makefile
+++ haproxy-3.0/Makefile
@@ -887,6 +887,35 @@ ifneq ($(TRACE),)
COPTS += -finstrument-functions
endif
+# PIE
+ifneq ($(USE_PIE),)
+OPTIONS_CFLAGS += -DUSE_PIE
+BUILD_OPTIONS += $(call ignore_implicit,USE_PIE)
+OPTIONS_LDFLAGS += -pie
+# still need to figure out how to express this conditional in the makefile
+# %ifarch s390 s390x %sparc
+# PIEFLAGS="-fPIE"
+# %else
+# PIEFLAGS="-fpie"
+# %endif
+# PIE_FLAGS.s390 = -fPIE
+# PIE_FLAGS.i386 = -fpie
+# SEC_FLAGS += $(PIE_FLAGS.$(ARCH))
+OPTIONS_CFLAGS += -fpie
+endif
+
+ifneq ($(USE_STACKPROTECTOR),)
+OPTIONS_CFLAGS += -DUSE_STACKPROTECTOR
+BUILD_OPTIONS += $(call ignore_implicit,USE_STACKPROTECTOR)
+OPTIONS_CFLAGS += -fstack-protector
+endif
+
+ifneq ($(USE_RELRO_NOW),)
+OPTIONS_CFLAGS += -DUSE_RELRO_NOW
+BUILD_OPTIONS += $(call ignore_implicit,USE_RELRO_NOW)
+OPTIONS_LDFLAGS += -Wl,-z,relro,-z,now
+endif
+
#### Global link options
# These options are added at the end of the "ld" command line. Use LDFLAGS to
# add options at the beginning of the "ld" command line if needed.