[Rpm-maint] [rpm-software-management/rpm] Enable hardening options in the build (PR #3445)

Panu Matilainen notifications at github.com
Thu Nov 14 09:10:31 UTC 2024


Commit 6e19c1602c1118938d556453ee33357ea0006d3d broke the build under Fedora default compiler flags due to missing mode argument to open(). Fix that and couple of not-handled return code cases, and make the build default to -fhardened to avoid this happening again.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/3445

-- Commit Summary --

  * Fix invalid use of open(..., O_CREAT) in openpgp.cert.d
  * Kludge around removeSBITS() not properly checking errors for now
  * Handle error return from audit_log_user_comm_message()
  * Always build with -fhardened if the compiler supports it

-- File Changes --

    M CMakeLists.txt (4)
    M lib/fsm.cc (6)
    M lib/keystore.cc (2)
    M plugins/audit.c (11)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/3445.patch
https://github.com/rpm-software-management/rpm/pull/3445.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3445
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/3445 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20241114/89b1814f/attachment.html>


More information about the Rpm-maint mailing list