Skip to content

Commit

Permalink
Use gcc option -mbranch-protection=standard
Browse files Browse the repository at this point in the history
The RPM spec has been updated to use gcc option
-mbranch-protection=standard on AArch64 since it's now required
by rpminspect.

https://sourceware.org/annobin/annobin.html/Test-dynamic-tags.html
  • Loading branch information
edewata committed Aug 20, 2024
1 parent aca9cb0 commit 876aa86
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions pki.spec
Original file line number Diff line number Diff line change
Expand Up @@ -1301,6 +1301,12 @@ CXX_FLAGS="$CXX_FLAGS -D_FORTIFY_SOURCE=3"
C_FLAGS="$C_FLAGS -fstack-clash-protection"
CXX_FLAGS="$CXX_FLAGS -fstack-clash-protection"

%ifarch aarch64
# https://sourceware.org/annobin/annobin.html/Test-dynamic-tags.html
C_FLAGS="$C_FLAGS -mbranch-protection=standard"
CXX_FLAGS="$CXX_FLAGS -mbranch-protection=standard"
%endif

%endif

pkgs=base\
Expand Down

0 comments on commit 876aa86

Please sign in to comment.