diff --git a/glibc.changes b/glibc.changes index 8047811..e0e9cc5 100644 --- a/glibc.changes +++ b/glibc.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Mon Oct 26 07:07:38 UTC 2020 - Richard Biener + +- Use --enable-cet on x86_64 to instrument glibc for indirect branch + tracking and shadow stack use. Enable indirect branch tracking + and shadow stack in the dynamic loader. [jsc#PM-2110] [bsc#1175154] + ------------------------------------------------------------------- Tue Sep 8 08:00:33 UTC 2020 - Andreas Schwab diff --git a/glibc.spec b/glibc.spec index 73a179d..c96d012 100644 --- a/glibc.spec +++ b/glibc.spec @@ -630,6 +630,11 @@ configure_and_build_glibc() { %ifarch ppc64p7 --with-cpu=power7 \ %endif +%ifarch x86_64 +%if %suse_version > 1500 + --enable-cet \ +%endif +%endif %if %{enable_stackguard_randomization} --enable-stackguard-randomization \ %endif