diff options
| author |  Reiner Herrmann <reiner@reiner-h.de> | 2020-10-08 22:23:52 +0200 |
|---|---|---|
| committer | Reiner Herrmann <reiner@reiner-h.de> | 2020-10-08 22:23:52 +0200 |
| commit | 5549f89325c324e27a0ba356d02b76591a2fdf43 (patch) | |
| tree | 65f866f04a890cb9bcde84f9efaf4d59103b5992 /src | |
| parent | build: let manpages depend on src/man target instead of non-existing .man files (diff) | |
| download | firejail-5549f89325c324e27a0ba356d02b76591a2fdf43.tar.gz firejail-5549f89325c324e27a0ba356d02b76591a2fdf43.tar.zst firejail-5549f89325c324e27a0ba356d02b76591a2fdf43.zip | |
build: add -fPIE to LDFLAGS
according to GCC documentation (https://gcc.gnu.org/onlinedocs/gcc/Link-Options.html):
"For predictable results, you must also specify the same set of options
used for compilation (-fpie, -fPIE, or model suboptions) when you
specify this linker option."
Diffstat (limited to 'src')
| -rw-r--r-- | src/common.mk.in | 2 | ||||
| -rw-r--r-- | src/libpostexecseccomp/Makefile.in | 2 | ||||
| -rw-r--r-- | src/libtrace/Makefile.in | 2 | ||||
| -rw-r--r-- | src/libtracelog/Makefile.in | 2 |
4 files changed, 4 insertions, 4 deletions
diff --git a/src/common.mk.in b/src/common.mk.in index fc0c612ea..c9ef455ed 100644 --- a/src/common.mk.in +++ b/src/common.mk.in | |||
| @@ -36,7 +36,7 @@ CFLAGS += -DPREFIX='"$(prefix)"' -DSYSCONFDIR='"$(sysconfdir)/firejail"' -DLIBDI | |||
| 36 | MANFLAGS = $(HAVE_X11) $(HAVE_PRIVATE_HOME) $(HAVE_APPARMOR) $(HAVE_OVERLAYFS) $(HAVE_DBUSPROXY) $(HAVE_FIRETUNNEL) $(HAVE_GLOBALCFG) $(HAVE_CHROOT) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_FILE_TRANSFER) $(HAVE_WHITELIST) $(HAVE_SELINUX) | 36 | MANFLAGS = $(HAVE_X11) $(HAVE_PRIVATE_HOME) $(HAVE_APPARMOR) $(HAVE_OVERLAYFS) $(HAVE_DBUSPROXY) $(HAVE_FIRETUNNEL) $(HAVE_GLOBALCFG) $(HAVE_CHROOT) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_FILE_TRANSFER) $(HAVE_WHITELIST) $(HAVE_SELINUX) |
| 37 | CFLAGS += $(MANFLAGS) | 37 | CFLAGS += $(MANFLAGS) |
| 38 | CFLAGS += -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -Wformat -Wformat-security | 38 | CFLAGS += -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -Wformat -Wformat-security |
| 39 | LDFLAGS += -pie -Wl,-z,relro -Wl,-z,now -lpthread | 39 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now -lpthread |
| 40 | EXTRA_LDFLAGS +=@EXTRA_LDFLAGS@ | 40 | EXTRA_LDFLAGS +=@EXTRA_LDFLAGS@ |
| 41 | 41 | ||
| 42 | ifdef NO_EXTRA_CFLAGS | 42 | ifdef NO_EXTRA_CFLAGS |
diff --git a/src/libpostexecseccomp/Makefile.in b/src/libpostexecseccomp/Makefile.in index 00dc6ee7e..edd4534b8 100644 --- a/src/libpostexecseccomp/Makefile.in +++ b/src/libpostexecseccomp/Makefile.in | |||
| @@ -9,7 +9,7 @@ C_FILE_LIST = $(sort $(wildcard *.c)) | |||
| 9 | OBJS = $(C_FILE_LIST:.c=.o) | 9 | OBJS = $(C_FILE_LIST:.c=.o) |
| 10 | BINOBJS = $(foreach file, $(OBJS), $file) | 10 | BINOBJS = $(foreach file, $(OBJS), $file) |
| 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security | 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security |
| 12 | LDFLAGS += -pie -Wl,-z,relro -Wl,-z,now | 12 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now |
| 13 | 13 | ||
| 14 | all: libpostexecseccomp.so | 14 | all: libpostexecseccomp.so |
| 15 | 15 | ||
diff --git a/src/libtrace/Makefile.in b/src/libtrace/Makefile.in index 2070fe0ea..5c7d0f885 100644 --- a/src/libtrace/Makefile.in +++ b/src/libtrace/Makefile.in | |||
| @@ -9,7 +9,7 @@ C_FILE_LIST = $(sort $(wildcard *.c)) | |||
| 9 | OBJS = $(C_FILE_LIST:.c=.o) | 9 | OBJS = $(C_FILE_LIST:.c=.o) |
| 10 | BINOBJS = $(foreach file, $(OBJS), $file) | 10 | BINOBJS = $(foreach file, $(OBJS), $file) |
| 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security | 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security |
| 12 | LDFLAGS += -pie -Wl,-z,relro -Wl,-z,now | 12 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now |
| 13 | 13 | ||
| 14 | all: libtrace.so | 14 | all: libtrace.so |
| 15 | 15 | ||
diff --git a/src/libtracelog/Makefile.in b/src/libtracelog/Makefile.in index db640617a..b1ac9e57c 100644 --- a/src/libtracelog/Makefile.in +++ b/src/libtracelog/Makefile.in | |||
| @@ -9,7 +9,7 @@ C_FILE_LIST = $(sort $(wildcard *.c)) | |||
| 9 | OBJS = $(C_FILE_LIST:.c=.o) | 9 | OBJS = $(C_FILE_LIST:.c=.o) |
| 10 | BINOBJS = $(foreach file, $(OBJS), $file) | 10 | BINOBJS = $(foreach file, $(OBJS), $file) |
| 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security | 11 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIC -Wformat -Wformat-security |
| 12 | LDFLAGS += -pie -Wl,-z,relro -Wl,-z,now | 12 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now |
| 13 | 13 | ||
| 14 | all: libtracelog.so | 14 | all: libtracelog.so |
| 15 | 15 | ||