Accepting request 659361 from server:mail

OBS-URL: https://build.opensuse.org/request/show/659361
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postfix?expand=0&rev=163

postfix.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Dec 13 10:20:31 UTC 2018 - malte.kraus@suse.com
+
+- binary hardening: link with full RELRO
+
 -------------------------------------------------------------------
 Sun Nov 25 10:18:07 UTC 2018 - Michael Ströder <michael@stroeder.com>
 

postfix.spec

@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
 
@@ -224,10 +224,13 @@ export AUXLIBS_LMDB="-llmdb"
 #export AUXLIBS_SDBM
 
 export PIE=-pie
+# using SHLIB_RPATH to specify unrelated linker flags, because LDFLAGS is
+# ignored
 make makefiles pie=yes shared=yes dynamicmaps=yes \
   shlib_directory=%{_prefix}/lib/%{name} \
   meta_directory=%{_prefix}/lib/%{name} \
-  config_directory=%{_sysconfdir}/%{name}
+  config_directory=%{_sysconfdir}/%{name} \
+  SHLIB_RPATH="-Wl,-rpath,%{pf_shlib_directory} -Wl,-z,relro,-z,now"
 make %{?_smp_mflags}
 # ---------------------------------------------------------------------------