From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: Sat, 24 Nov 2018 08:15:04 +0000 (+0200)
Subject: dovecot.m4: Add DC_DOVECOT_HARDENING to check hardening options
X-Git-Tag: 2.3.5~320
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4695c87f75be87f2172a7b58fb5cac37855a5949;p=thirdparty%2Fdovecot%2Fcore.git

dovecot.m4: Add DC_DOVECOT_HARDENING to check hardening options
---

diff --git a/m4/dovecot.m4 b/m4/dovecot.m4
index 11b9d3aa3c..8ff9d325aa 100644
--- a/m4/dovecot.m4
+++ b/m4/dovecot.m4
@@ -304,6 +304,22 @@ AC_DEFUN([AX_SUBST_L],[
 	m4_foreach([__var__], [$@], [AC_SUBST(__var__)])
 ])
 
+AC_DEFUN([DC_DOVECOT_HARDENING],[
+        AC_ARG_ENABLE(hardening,
+        AS_HELP_STRING([--enable-hardening=yes], [Enable various hardenings (default: yes)]),
+                enable_hardening=$enableval,
+                enable_hardening=yes)
+
+        AC_MSG_CHECKING([Whether to enable hardening])
+        AC_MSG_RESULT([$enable_hardening])
+
+	AC_CC_PIE
+	AC_CC_F_STACK_PROTECTOR
+	AC_CC_D_FORTIFY_SOURCE
+	AC_CC_RETPOLINE
+	AC_LD_RELRO
+])
+
 AC_DEFUN([DC_DOVECOT],[
 	AC_ARG_WITH(dovecot,
 	  [  --with-dovecot=DIR      Dovecot base directory],
@@ -366,6 +382,7 @@ AC_DEFUN([DC_DOVECOT],[
 
 	AM_CONDITIONAL(DOVECOT_INSTALLED, test "$DOVECOT_INSTALLED" = "yes")
 
+	DC_DOVECOT_HARDERNING
 	DC_PLUGIN_DEPS
 	DC_DOVECOT_TEST_WRAPPER
 ])