diff options
author | netblue30 <netblue30@yahoo.com> | 2018-03-23 19:28:05 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2018-03-23 19:28:05 -0400 |
commit | e3f64f751ec2caaf4c209f95eefab5bc9166db0e (patch) | |
tree | 9e52bf8ec37c4b53813144d84a3df8989efb82ed /configure.ac | |
parent | added java support for libreoffice (diff) | |
download | firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.tar.gz firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.tar.zst firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.zip |
support Spectre mitigation patch for gcc compiler
Diffstat (limited to 'configure.ac')
-rw-r--r-- | configure.ac | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index 952dec3b8..d6d4eb874 100644 --- a/configure.ac +++ b/configure.ac | |||
@@ -9,6 +9,24 @@ AC_PROG_CC | |||
9 | AC_PROG_INSTALL | 9 | AC_PROG_INSTALL |
10 | AC_PROG_RANLIB | 10 | AC_PROG_RANLIB |
11 | 11 | ||
12 | |||
13 | HAVE_SPECTRE="no" | ||
14 | AC_MSG_CHECKING(for Spectre mitigation support in gcc compiler) | ||
15 | AS_IF([test "$CC" = "gcc"], [ | ||
16 | HAVE_SPECTRE="yes" | ||
17 | $CC -mindirect-branch=thunk -c dummy.c || HAVE_SPECTRE="no" | ||
18 | rm -f dummy.o | ||
19 | ]) | ||
20 | AS_IF([test "$HAVE_SPECTRE" = "yes"], [ | ||
21 | AC_MSG_RESULT(yes) | ||
22 | EXTRA_CFLAGS+="-mindirect-branch=thunk" | ||
23 | ]) | ||
24 | AS_IF([test "$HAVE_SPECTRE" = "no"], [ | ||
25 | AC_MSG_RESULT(... not available) | ||
26 | ]) | ||
27 | AC_SUBST([EXTRA_CFLAGS]) | ||
28 | |||
29 | |||
12 | HAVE_APPARMOR="" | 30 | HAVE_APPARMOR="" |
13 | AC_ARG_ENABLE([apparmor], | 31 | AC_ARG_ENABLE([apparmor], |
14 | AS_HELP_STRING([--enable-apparmor], [enable apparmor])) | 32 | AS_HELP_STRING([--enable-apparmor], [enable apparmor])) |
@@ -198,7 +216,9 @@ echo " file transfer support: $HAVE_FILE_TRANSFER" | |||
198 | echo " overlayfs support: $HAVE_OVERLAYFS" | 216 | echo " overlayfs support: $HAVE_OVERLAYFS" |
199 | echo " git install support: $HAVE_GIT_INSTALL" | 217 | echo " git install support: $HAVE_GIT_INSTALL" |
200 | echo " busybox workaround: $BUSYBOX_WORKAROUND" | 218 | echo " busybox workaround: $BUSYBOX_WORKAROUND" |
219 | echo " Spectre compiler patch: $HAVE_SPECTRE" | ||
201 | echo " EXTRA_LDFLAGS: $EXTRA_LDFLAGS" | 220 | echo " EXTRA_LDFLAGS: $EXTRA_LDFLAGS" |
221 | echo " EXTRA_CFLAGS: $EXTRA_CFLAGS" | ||
202 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" | 222 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" |
203 | echo " Gcov instrumentation: $HAVE_GCOV" | 223 | echo " Gcov instrumentation: $HAVE_GCOV" |
204 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" | 224 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" |