svn commit: samba r22974 - in branches/SAMBA_3_0/source: .
idra at samba.org
idra at samba.org
Thu May 17 18:20:23 GMT 2007
Author: idra
Date: 2007-05-17 18:20:16 +0000 (Thu, 17 May 2007)
New Revision: 22974
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=22974
Log:
enable relro with PIE if available, this gives extra protection to the ELF segment
Modified:
branches/SAMBA_3_0/source/configure.in
Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===================================================================
--- branches/SAMBA_3_0/source/configure.in 2007-05-17 13:56:19 UTC (rev 22973)
+++ branches/SAMBA_3_0/source/configure.in 2007-05-17 18:20:16 UTC (rev 22974)
@@ -1763,6 +1763,29 @@
fi
fi
+#Check if we can enable relro as well
+if test x"${samba_cv_fpie}" = x"yes"
+then
+ AC_CACHE_CHECK(for relro, samba_cv_fpie_relro,
+ [
+ cat > conftest.c <<EOF
+int foo;
+main () { return 0;}
+EOF
+ if AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS -pie -fPIE -Wl,z,relro -o conftest conftest.c 1>&AS_MESSAGE_LOG_FD])
+ then
+ samba_cv_fpie_relro=yes
+ else
+ samba_cv_fpie_relro=no
+ fi
+ rm -f conftest*
+ ])
+ if test x"${samba_cv_fpie_relro}" = x"yes"
+ then
+ PIE_LDFLAGS="-pie -Wl,z,relro"
+ fi
+fi
+
# Assume non-shared by default and override below
BLDSHARED="false"
More information about the samba-cvs
mailing list