integ/database/mariadb/centos/files/mariadb-annocheck.patch
Dongqi Chen 561842194b CentOS 8: Upgrade mariadb to version 10.3.17
(1)Release Version Upgrade

(2)Fix spec to remove TokuDB related compilation errors

(3)Extract the files in srpm to replace the 'centos/files/' directory

Story: 2006729
Task: 38764
Depends-On: https://review.opendev.org/#/c/734429/

Change-Id: I4c1543440027a90edf0d1653b61deea0d9a104cd
Signed-off-by: Dongqi Chen <chen.dq@neusoft.com>
2020-06-12 13:49:35 +08:00

14 lines
679 B
Diff

Harden the "hardened" flags even more to comply with RHEL8 security rules
--- mariadb-10.3.10/CMakeLists.txt 2018-10-02 11:45:39.000000000 +0200
+++ mariadb-10.3.10/CMakeLists.txt_patched 2018-11-08 03:48:01.713969313 +0100
@@ -226,7 +226,7 @@ IF(NOT WITH_TSAN)
# security-enhancing flags
MY_CHECK_AND_SET_COMPILER_FLAG("-pie -fPIC")
MY_CHECK_AND_SET_COMPILER_FLAG("-Wl,-z,relro,-z,now")
- MY_CHECK_AND_SET_COMPILER_FLAG("-fstack-protector --param=ssp-buffer-size=4")
+ MY_CHECK_AND_SET_COMPILER_FLAG("-fstack-protector-strong --param=ssp-buffer-size=4")
MY_CHECK_AND_SET_COMPILER_FLAG("-D_FORTIFY_SOURCE=2" RELEASE RELWITHDEBINFO)
ENDIF()
ENDIF()