mozilla-nss/add-relro-linker-option.patch

diff -up nss/coreconf/Linux.mk.relro nss/coreconf/Linux.mk
--- nss/coreconf/Linux.mk.relro	2013-04-09 14:29:45.943228682 -0700
+++ nss/coreconf/Linux.mk	2013-04-09 14:31:26.194953927 -0700
@@ -174,6 +174,12 @@ endif
 endif
 endif
 
+# harden DSOs/executables a bit against exploits
+ifeq (2.6,$(firstword $(sort 2.6 $(OS_RELEASE))))
+DSO_LDOPTS+=-Wl,-z,relro
+LDFLAGS	+= -Wl,-z,relro
+endif
+
 USE_SYSTEM_ZLIB = 1
 ZLIB_LIBS = -lz
- update to NSS 3.36.4 * Fix crash on macOS related to authentication tokens, e.g. PK11or WebAuthn. (bmo#1461731) Bugfixes from 3.36.2 * Connecting to a server that was recently upgraded to TLS 1.3 would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303) * Fix a rare bug with PKCS#12 files. (bmo#1460673) - use relro linker option (add-relro-linker-option.patch) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=262 2018-06-07 15:20:25 +02:00			`diff -up nss/coreconf/Linux.mk.relro nss/coreconf/Linux.mk`
			`--- nss/coreconf/Linux.mk.relro 2013-04-09 14:29:45.943228682 -0700`
			`+++ nss/coreconf/Linux.mk 2013-04-09 14:31:26.194953927 -0700`
			`@@ -174,6 +174,12 @@ endif`
			`endif`
			`endif`

			`+# harden DSOs/executables a bit against exploits`
			`+ifeq (2.6,$(firstword $(sort 2.6 $(OS_RELEASE))))`
			`+DSO_LDOPTS+=-Wl,-z,relro`
			`+LDFLAGS += -Wl,-z,relro`
			`+endif`
			`+`
			`USE_SYSTEM_ZLIB = 1`
			`ZLIB_LIBS = -lz`