From 15068e11972a5377faaa4a88f7b61214774cfd8c86ab19b9af00103c27d09236 Mon Sep 17 00:00:00 2001 From: Johannes Meixner Date: Thu, 15 Apr 2021 08:05:17 +0000 Subject: [PATCH] Accepting request 885337 from home:wfrisch:branches:Printing Hardening: compile with PIC, link as PIE OBS-URL: https://build.opensuse.org/request/show/885337 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=143 --- ghostscript-mini.changes | 5 +++++ ghostscript-mini.spec | 5 +++-- ghostscript.changes | 5 +++++ ghostscript.spec | 5 +++-- 4 files changed, 16 insertions(+), 4 deletions(-) diff --git a/ghostscript-mini.changes b/ghostscript-mini.changes index a9160a4..c4b6b7e 100644 --- a/ghostscript-mini.changes +++ b/ghostscript-mini.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Apr 14 11:57:25 UTC 2021 - Wolfgang Frisch + +- Hardening: compile with PIC, link as PIE + ------------------------------------------------------------------- Fri Mar 26 13:42:05 UTC 2021 - Dominique Leuenberger diff --git a/ghostscript-mini.spec b/ghostscript-mini.spec index 00bf008..7928ebd 100644 --- a/ghostscript-mini.spec +++ b/ghostscript-mini.spec @@ -215,8 +215,9 @@ rm -rf lcms2art # Derive build timestamp from latest changelog entry export SOURCE_DATE_EPOCH=$(date -d "$(head -n 2 %{_sourcedir}/%{name}.changes | tail -n 1 | cut -d- -f1 )" +%s) # Set our preferred architecture-specific flags for the compiler and linker: -export CFLAGS="%{optflags} -fno-strict-aliasing" -export CXXFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export CXXFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export LDFLAGS="-pie" autoreconf -fi # --docdir=%%{_defaultdocdir}/%%{name} does not work therefore it is not used. # --disable-cups and --without-pdftoraster diff --git a/ghostscript.changes b/ghostscript.changes index e046931..97ba642 100644 --- a/ghostscript.changes +++ b/ghostscript.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Apr 14 11:56:22 UTC 2021 - Wolfgang Frisch + +- Hardening: compile with PIC, link as PIE + ------------------------------------------------------------------- Tue Oct 20 16:38:24 CEST 2020 - Ismail Dönmez diff --git a/ghostscript.spec b/ghostscript.spec index 85f325f..09ce87c 100644 --- a/ghostscript.spec +++ b/ghostscript.spec @@ -356,8 +356,9 @@ rm -rf lcms2art # Derive build timestamp from latest changelog entry export SOURCE_DATE_EPOCH=$(date -d "$(head -n 2 %{_sourcedir}/%{name}.changes | tail -n 1 | cut -d- -f1 )" +%s) # Set our preferred architecture-specific flags for the compiler and linker: -export CFLAGS="%{optflags} -fno-strict-aliasing" -export CXXFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export CXXFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export LDFLAGS="-pie" autoreconf -fi # --docdir=%%{_defaultdocdir}/%%{name} does not work therefore it is not used. # --enable-cups but no longer --with-pdftoraster --enable-dbus --with-install-cups because