Marcus Rueckert
3d2a7368d4
- drop patches we pulled from upstream git: 0001-BUG-MINOR-log-missing-some-ARGC_-entries-in-fmt_dire.patch 0002-DOC-usesrc-root-privileges-requirements.patch 0003-BUILD-ssl-Allow-building-against-libssl-without-SSLv.patch 0004-DOC-MINOR-fix-OpenBSD-versions-where-haproxy-works.patch 0005-BUG-MINOR-http-sample-gmtime-localtime-can-fail.patch 0006-DOC-typo-in-redirect-302-code-meaning.patch 0007-DOC-mention-that-ms-is-left-padded-with-zeroes.patch 0008-CLEANUP-.gitignore-ignore-more-test-files.patch 0009-CLEANUP-.gitignore-finally-ignore-everything-but-wha.patch 0010-MEDIUM-config-emit-a-warning-on-a-frontend-without-l.patch 0011-BUG-MEDIUM-counters-ensure-that-src_-inc-clr-_gpc0-c.patch 0012-DOC-ssl-missing-LF.patch 0013-DOC-fix-example-of-http-request-using-ssl_fc_session.patch 0014-BUG-MINOR-http-remove-stupid-HTTP_METH_NONE-entry.patch 0015-BUG-MAJOR-http-don-t-call-http_send_name_header-afte.patch - refresh/redo patches to apply cleanly again: old: haproxy-1.2.16_config_haproxy_user.patch new: haproxy-1.6.0_config_haproxy_user.patch old: haproxy-makefile_lib.patch new: haproxy-1.6.0-makefile_lib.patch old: sec-options.patch new: haproxy-1.6.0-sec-options.patch - added new haproxy.cfg to have a minimal config we can actually launch! - drop patch haproxy-1.5.8-fix-bashisms.patch: patched files no longer exist - drop haproxy.vim: we will use the copy which ships with the upstream tarball now. OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=117
41 lines
1.1 KiB
Diff
41 lines
1.1 KiB
Diff
Index: Makefile
|
|
===================================================================
|
|
--- Makefile.orig
|
|
+++ Makefile
|
|
@@ -671,6 +671,35 @@ OPTIONS_CFLAGS += -DUSE_TFO
|
|
BUILD_OPTIONS += $(call ignore_implicit,USE_TFO)
|
|
endif
|
|
|
|
+# PIE
|
|
+ifneq ($(USE_PIE),)
|
|
+OPTIONS_CFLAGS += -DUSE_PIE
|
|
+BUILD_OPTIONS += $(call ignore_implicit,USE_PIE)
|
|
+OPTIONS_LDFLAGS += -pie
|
|
+# still need to figure out how to express this conditional in the makefile
|
|
+# %ifarch s390 s390x %sparc
|
|
+# PIEFLAGS="-fPIE"
|
|
+# %else
|
|
+# PIEFLAGS="-fpie"
|
|
+# %endif
|
|
+# PIE_FLAGS.s390 = -fPIE
|
|
+# PIE_FLAGS.i386 = -fpie
|
|
+# SEC_FLAGS += $(PIE_FLAGS.$(ARCH))
|
|
+OPTIONS_CFLAGS += -fpie
|
|
+endif
|
|
+
|
|
+ifneq ($(USE_STACKPROTECTOR),)
|
|
+OPTIONS_CFLAGS += -DUSE_STACKPROTECTOR
|
|
+BUILD_OPTIONS += $(call ignore_implicit,USE_STACKPROTECTOR)
|
|
+OPTIONS_CFLAGS += -fstack-protector
|
|
+endif
|
|
+
|
|
+ifneq ($(USE_RELRO_NOW),)
|
|
+OPTIONS_CFLAGS += -DUSE_RELRO_NOW
|
|
+BUILD_OPTIONS += $(call ignore_implicit,USE_RELRO_NOW)
|
|
+OPTIONS_LDFLAGS += -Wl,-z,relro,-z,now
|
|
+endif
|
|
+
|
|
# This one can be changed to look for ebtree files in an external directory
|
|
EBTREE_DIR := ebtree
|
|
|