55054b Re-enable normal Fedora hardening macros

Authored and Committed by Daniel P. Berrangé 6 years ago
1 file changed. 12 lines added. 20 lines removed.
    Re-enable normal Fedora hardening macros
    
    We previously disabled the hardened build macros because they broke
    static linking. This is now resolved, so we can use them as is, which in
    turn ensures ksmctl gets linked correctly.
    
    While doing this it is not neccessary to pass -pie in ldflags, as we are
    already giving the --enable-pie configure option. This lets us move
    setting  of linker/compiler flags into the common run_configure
    function, rather than duplicating them for static & dynamic builds
    
    Finally, even though QEMU sets _FORTIFY_SOURCE itself, there's no reason
    to strip it from the RPM provided build flags - it is harmless for it to
    appear twice on compiler args. This ensures ksmctl.c gets fortified.
    
    Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
    
        
file modified
+12 -20