[arch-commits] Commit in pacman/trunk (PKGBUILD makepkg.conf)

[Allan McRae]

    Date: Sunday, August 14, 2011 @ 05:13:40
  Author: allan
Revision: 135469

upgpkg: pacman 3.5.4-4

adjust CFLAGS/LDFLAGS for additional security and some more optimization (fixes FS#18864)

Modified:
  pacman/trunk/PKGBUILD
  pacman/trunk/makepkg.conf

--------------+
 PKGBUILD     |    4 ++--
 makepkg.conf |    6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2011-08-14 07:32:48 UTC (rev 135468)
+++ PKGBUILD	2011-08-14 09:13:40 UTC (rev 135469)
@@ -3,7 +3,7 @@
 
 pkgname=pacman
 pkgver=3.5.4
-pkgrel=3
+pkgrel=4
 pkgdesc="A library-based package manager with dependency support"
 arch=('i686' 'x86_64')
 url="http://www.archlinux.org/pacman/"
@@ -23,7 +23,7 @@
 md5sums=('2dd3a85d55ee3dd89abd349aa837447c'
          'e99eb721b6b704f68c5f47468507c102'
          'f8b939d9b2beb79a0436961a2d707d7c'
-         'a8684989d3dfad5a6e1bcf95af3e571b'
+         'c034b061c86b3f26a9646cf8efc7ff11'
          '749a4ddc6d8418d8d031f1c9b4e09d6f')
 
 # keep an upgrade path for older installations

Modified: makepkg.conf
===================================================================
--- makepkg.conf	2011-08-14 07:32:48 UTC (rev 135468)
+++ makepkg.conf	2011-08-14 09:13:40 UTC (rev 135469)
@@ -29,9 +29,9 @@
 #-- Exclusive: will only run on @CARCH@
 # -march (or -mcpu) builds exclusively for an architecture
 # -mtune optimizes for an architecture, but builds for whole processor family
-CFLAGS="@CARCHFLAGS at -mtune=generic -O2 -pipe"
-CXXFLAGS="@CARCHFLAGS at -mtune=generic -O2 -pipe"
-LDFLAGS="-Wl,--hash-style=gnu -Wl,--as-needed"
+CFLAGS="@CARCHFLAGS at -mtune=generic -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
+CXXFLAGS="@CARCHFLAGS at -mtune=generic -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
+LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,--hash-style=gnu"
 #-- Make Flags: change this for DistCC/SMP systems
 #MAKEFLAGS="-j2"