[arch-commits] Commit in hardening-wrapper/trunk (PKGBUILD cc-wrapper.sh)

Daniel Micay thestinger at archlinux.org
Tue Jul 22 23:14:33 UTC 2014


    Date: Wednesday, July 23, 2014 @ 01:14:33
  Author: thestinger
Revision: 116125

upgpkg: hardening-wrapper 2-1

Modified:
  hardening-wrapper/trunk/PKGBUILD
  hardening-wrapper/trunk/cc-wrapper.sh

---------------+
 PKGBUILD      |    4 ++--
 cc-wrapper.sh |    7 +++++++
 2 files changed, 9 insertions(+), 2 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2014-07-22 23:07:32 UTC (rev 116124)
+++ PKGBUILD	2014-07-22 23:14:33 UTC (rev 116125)
@@ -1,6 +1,6 @@
 # Maintainer: Daniel Micay <danielmicay at gmail.com>
 pkgname=hardening-wrapper
-pkgver=1
+pkgver=2
 pkgrel=1
 pkgdesc='Wrapper script for building hardened executables by default'
 arch=(any)
@@ -8,7 +8,7 @@
 license=('GPL')
 depends=(bash)
 source=(cc-wrapper.sh path.sh)
-sha1sums=('99d2a33b30790c51e7ea4340dc85368ae65cbdd1'
+sha1sums=('bfa2ef7c0fd3ee0b92c43100c994eb72c4da39e2'
           '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc')
 
 package() {

Modified: cc-wrapper.sh
===================================================================
--- cc-wrapper.sh	2014-07-22 23:07:32 UTC (rev 116124)
+++ cc-wrapper.sh	2014-07-22 23:14:33 UTC (rev 116125)
@@ -7,6 +7,7 @@
 force_fortify="${HARDENING_FORTIFY:-2}"
 force_pie="${HARDENING_PIE:-1}"
 force_relro="${HARDENING_RELRO:-1}"
+force_stack_check="${HARDENING_STACK_CHECK:-0}"
 force_stack_protector="${HARDENING_STACK_PROTECTOR:-2}"
 
 error() {
@@ -76,6 +77,12 @@
   *) error 'invalid value for HARDENING_RELRO' ;;
 esac
 
+case "$force_stack_check" in
+  0) ;;
+  1) arguments+=(-fstack-check) ;;
+  *) error 'invalid value for HARDENING_STACK_CHECK' ;;
+esac
+
 case "$force_stack_protector" in
   0) ;;
   1) arguments+=(-fstack-protector) ;;




More information about the arch-commits mailing list