diff options
author | netblue30 <netblue30@yahoo.com> | 2018-03-23 19:28:05 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2018-03-23 19:28:05 -0400 |
commit | e3f64f751ec2caaf4c209f95eefab5bc9166db0e (patch) | |
tree | 9e52bf8ec37c4b53813144d84a3df8989efb82ed /configure | |
parent | added java support for libreoffice (diff) | |
download | firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.tar.gz firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.tar.zst firejail-e3f64f751ec2caaf4c209f95eefab5bc9166db0e.zip |
support Spectre mitigation patch for gcc compiler
Diffstat (limited to 'configure')
-rwxr-xr-x | configure | 30 |
1 files changed, 30 insertions, 0 deletions
@@ -646,6 +646,7 @@ EGREP | |||
646 | GREP | 646 | GREP |
647 | CPP | 647 | CPP |
648 | HAVE_APPARMOR | 648 | HAVE_APPARMOR |
649 | EXTRA_CFLAGS | ||
649 | RANLIB | 650 | RANLIB |
650 | INSTALL_DATA | 651 | INSTALL_DATA |
651 | INSTALL_SCRIPT | 652 | INSTALL_SCRIPT |
@@ -3105,6 +3106,33 @@ else | |||
3105 | fi | 3106 | fi |
3106 | 3107 | ||
3107 | 3108 | ||
3109 | |||
3110 | HAVE_SPECTRE="no" | ||
3111 | { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Spectre mitigation support in gcc compiler" >&5 | ||
3112 | $as_echo_n "checking for Spectre mitigation support in gcc compiler... " >&6; } | ||
3113 | if test "$CC" = "gcc"; then : | ||
3114 | |||
3115 | HAVE_SPECTRE="yes" | ||
3116 | $CC -mindirect-branch=thunk -c dummy.c || HAVE_SPECTRE="no" | ||
3117 | rm -f dummy.o | ||
3118 | |||
3119 | fi | ||
3120 | if test "$HAVE_SPECTRE" = "yes"; then : | ||
3121 | |||
3122 | { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 | ||
3123 | $as_echo "yes" >&6; } | ||
3124 | EXTRA_CFLAGS+="-mindirect-branch=thunk" | ||
3125 | |||
3126 | fi | ||
3127 | if test "$HAVE_SPECTRE" = "no"; then : | ||
3128 | |||
3129 | { $as_echo "$as_me:${as_lineno-$LINENO}: result: ... not available" >&5 | ||
3130 | $as_echo "... not available" >&6; } | ||
3131 | |||
3132 | fi | ||
3133 | |||
3134 | |||
3135 | |||
3108 | HAVE_APPARMOR="" | 3136 | HAVE_APPARMOR="" |
3109 | # Check whether --enable-apparmor was given. | 3137 | # Check whether --enable-apparmor was given. |
3110 | if test "${enable_apparmor+set}" = set; then : | 3138 | if test "${enable_apparmor+set}" = set; then : |
@@ -5024,7 +5052,9 @@ echo " file transfer support: $HAVE_FILE_TRANSFER" | |||
5024 | echo " overlayfs support: $HAVE_OVERLAYFS" | 5052 | echo " overlayfs support: $HAVE_OVERLAYFS" |
5025 | echo " git install support: $HAVE_GIT_INSTALL" | 5053 | echo " git install support: $HAVE_GIT_INSTALL" |
5026 | echo " busybox workaround: $BUSYBOX_WORKAROUND" | 5054 | echo " busybox workaround: $BUSYBOX_WORKAROUND" |
5055 | echo " Spectre compiler patch: $HAVE_SPECTRE" | ||
5027 | echo " EXTRA_LDFLAGS: $EXTRA_LDFLAGS" | 5056 | echo " EXTRA_LDFLAGS: $EXTRA_LDFLAGS" |
5057 | echo " EXTRA_CFLAGS: $EXTRA_CFLAGS" | ||
5028 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" | 5058 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" |
5029 | echo " Gcov instrumentation: $HAVE_GCOV" | 5059 | echo " Gcov instrumentation: $HAVE_GCOV" |
5030 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" | 5060 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" |