Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:Factory checked in at 2016-05-23 17:30:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaFirefox (Old) and /work/SRC/openSUSE:Factory/.MozillaFirefox.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaFirefox" Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaFirefox/MozillaFirefox.changes 2016-05-20 11:54:31.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaFirefox.new/MozillaFirefox.changes 2016-05-23 17:30:31.000000000 +0200 @@ -1,0 +2,5 @@ +Fri May 13 00:00:00 CEST 2016 - [email protected] + +- enable build with PIE and full relro on x86_64 (boo#980384) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.DmjCat/_old 2016-05-23 17:30:36.000000000 +0200 +++ /var/tmp/diff_new_pack.DmjCat/_new 2016-05-23 17:30:36.000000000 +0200 @@ -23,6 +23,9 @@ %define update_channel release %define releasedate 2016050300 +# PIE, full relro (x86_64 for now) +%define build_hardened 1 + # general build definitions %if "%{update_channel}" != "aurora" %define progname firefox @@ -318,6 +321,13 @@ # Limit RAM usage during link export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads" %endif + +%if 0%{?build_hardened} +%ifarch x86_64 +export LDFLAGS="${LDFLAGS} -Wl,-z,relro,-z,now" +%endif +%endif + %ifarch ppc64 ppc64le export CFLAGS="$CFLAGS -mminimal-toc" %endif @@ -340,6 +350,9 @@ %else ac_add_options --enable-default-toolkit=cairo-gtk2 %endif +%if 0%{?build_hardened} +ac_add_options --enable-pie +%endif %ifarch %ix86 %arm %if 0%{?suse_version} > 1230 ac_add_options --disable-optimize
