gettext: Fix hardening for some binaries.

[people/stevee/ipfire-3.x.git] / gettext / gettext.nm

diff --git a/gettext/gettext.nm b/gettext/gettext.nm
index 264eb2db032a197209a13a0172c1a7245a86c28f..1e2af67f74f01e40392fc442e54e2d6828979971 100644 (file)
--- a/gettext/gettext.nm
+++ b/gettext/gettext.nm
@@ -5,7 +5,7 @@
 
 name       = gettext
 version    = 0.21.1
-release    = 2.1
+release    = 3
 
 groups     = System/Base
 url        = https://www.gnu.org/software/gettext/
@@ -44,6 +44,13 @@ build
                --enable-shared \
                --disable-rpath
 
+       configure_cmds
+               # Add additional compiler flages to build gettext-tools binaries with
+               # proper hardening.
+               sed -i '/^CFLAGS =/ s/$/ -fno-builtin-exit -D__noreturn__=/' \
+                       %{DIR_APP}/gettext-tools/src/Makefile
+       end
+
        test
                make check || :
        end