diff options
| author | Dimitry Andric <dim@FreeBSD.org> | 2011-02-15 22:03:09 +0000 |
|---|---|---|
| committer | Dimitry Andric <dim@FreeBSD.org> | 2011-02-15 22:03:09 +0000 |
| commit | 152e60f2fe72db456bfeff4780a7db291c58106d (patch) | |
| tree | ed19a330dc5f9d0725baedab2bf3317a6ec2fae8 /secure | |
| parent | 09d6cb0a23a1a8d045af492b17b75bd98e5b6d32 (diff) | |
| download | src-152e60f2fe72db456bfeff4780a7db291c58106d.tar.gz src-152e60f2fe72db456bfeff4780a7db291c58106d.zip | |
Fix some leftover binaries and shared libraries in the system that still
have an executable stack, due to linking in hand-assembled .S or .s
files, that have no .GNU-stack sections:
RWX --- --- /lib/libcrypto.so.6
RWX --- --- /lib/libmd.so.5
RWX --- --- /lib/libz.so.6
RWX --- --- /lib/libzpool.so.2
RWX --- --- /usr/lib/liblzma.so.5
These were found using scanelf, from the sysutils/pax-utils port.
Reviewed by: kib
Notes
Notes:
svn path=/head/; revision=218723
Diffstat (limited to 'secure')
| -rw-r--r-- | secure/lib/libcrypto/Makefile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/secure/lib/libcrypto/Makefile b/secure/lib/libcrypto/Makefile index 0c019055d681..0a1704c4955e 100644 --- a/secure/lib/libcrypto/Makefile +++ b/secure/lib/libcrypto/Makefile @@ -345,6 +345,10 @@ INCSDIR= ${INCLUDEDIR}/openssl CSTD= gnu89 +.if !empty(SRCS:M*.s) +AFLAGS+= --noexecstack +.endif + CLEANFILES= buildinf.h opensslconf.h evp.h buildinf.h: ${.CURDIR}/Makefile |