Add BIND-NOW compile flag for sotruss-lib.so

This commit is contained in:
lipengyu 2025-03-14 16:12:30 +08:00
parent 7d6021c4ee
commit f4dc94fd53
2 changed files with 32 additions and 1 deletions

View File

@ -0,0 +1,24 @@
From 2eacc0a1edf1912cc3438e80ac49ed910a80ddf4 Mon Sep 17 00:00:00 2001
From: lipengyu <lipengyu@kylinos.cn>
Date: Sat, 8 Mar 2025 02:21:06 +0800
Subject: [PATCH] Link sotruss-lib.so with BIND_NOW for --enable-bind-now
---
elf/Makefile | 1 +
1 file changed, 1 insertion(+)
diff --git a/elf/Makefile b/elf/Makefile
index 27c6296f..7ef6f7d1 100644
--- a/elf/Makefile
+++ b/elf/Makefile
@@ -134,6 +134,7 @@ install-others += $(inst_auditdir)/sotruss-lib.so
install-bin-script += sotruss
generated += sotruss
libof-sotruss-lib = extramodules
+LDFLAGS-sotruss-lib.so += $(z-now-$(bind-now))
$(objpfx)sotruss-lib.so: $(objpfx)sotruss-lib.os
$(build-module-asneeded)
$(objpfx)sotruss-lib.so: $(common-objpfx)libc.so $(objpfx)ld.so \
--
2.27.0

View File

@ -62,7 +62,7 @@
##############################################################################
Name: glibc
Version: 2.28
Release: 104
Release: 105
Summary: The GNU libc libraries
License: %{all_license}
URL: http://www.gnu.org/software/glibc/
@ -171,6 +171,7 @@ Patch84: backport-Reversing-calculation-of-__x86_shared_non_t.patch
Patch85: backport-x86-Optimizing-memcpy-for-AMD-Zen-architect.patch
Patch86: backport-x86-Add-Hygon-support.patch
Patch87: backport-CVE-2025-0395-underallocation-of-abort_msg_s-struct.patch
Patch88: Add-BIND_NOW-for-sotruss-lib.patch
Provides: ldconfig rtld(GNU_HASH) bundled(gnulib)
@ -1287,6 +1288,12 @@ fi
%endif
%changelog
* Fri Mar 14 2025 lipengyu <lipengyu@kylinos.cn> - 2.28-105
- Type:update
- ID:NA
- SUG:NA
- DESC:Add BIND-NOW compile flag for sotruss-lib.so
* Tue Feb 25 2025 taoyuxiang <taoyuxiang2@huawei.com> - 2.28-104
- Type:CVE
- CVE:CVE-2025-0395