summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSam James <sam@gentoo.org>2024-01-29 16:00:31 +0000
committerSam James <sam@gentoo.org>2024-01-29 16:00:31 +0000
commitdf504c5e4541535356b6d83373dd2c82992ae2d8 (patch)
tree681abe7b631bafc9a5c44782e57f6a3c3cde5a10
parentdev-perl/File-Scan-ClamAV: require clamav[clamavapp] (diff)
downloadgentoo-df504c5e4541535356b6d83373dd2c82992ae2d8.tar.gz
gentoo-df504c5e4541535356b6d83373dd2c82992ae2d8.tar.bz2
gentoo-df504c5e4541535356b6d83373dd2c82992ae2d8.zip
sys-devel/binutils: error out on exec stack & rwx segments for hardened for >=2.42
Pass --enable-error-execstack=yes and --enable-error-rwx-segments=yes for USE=hardened. New options in 2.42. Signed-off-by: Sam James <sam@gentoo.org>
-rw-r--r--sys-devel/binutils/binutils-9999.ebuild2
1 files changed, 2 insertions, 0 deletions
diff --git a/sys-devel/binutils/binutils-9999.ebuild b/sys-devel/binutils/binutils-9999.ebuild
index 5f745bd13e6a..cf70b25e7676 100644
--- a/sys-devel/binutils/binutils-9999.ebuild
+++ b/sys-devel/binutils/binutils-9999.ebuild
@@ -314,6 +314,8 @@ src_configure() {
if use hardened ; then
myconf+=(
+ --enable-error-execstack=yes
+ --enable-error-rwx-segments=yes
--enable-default-execstack=no
)
fi