#4 spec: add -mbranch-protection=standard
Opened 3 months ago by wcrobert. Modified 3 months ago
rpms/ wcrobert/busybox rawhide  into  rawhide

file modified
+6
@@ -52,6 +52,12 @@ 

  %global hldflags %{_hardening_ldflags} -Wl,-z,relro,-z,now

  %endif

  

+ %ifarch aarch64

+ %global hcflags %{_hardening_cflags} -mbranch-protection=standard

+ %endif

+ 

+ 

+ 

  Name:		busybox

  Version:	1.36.1

  Release:	7%{?dist}

busybox doesn't use the default build flags, so for aarch64 builds add
in BTI and PAC support.

Note that it will get turned off becuase musl C doesn't support PAC and
BTI yet, but this prepares busybox for that support.

Signed-off-by: Bill Roberts bill.roberts@arm.com

Metadata