mc: Proper harden consaver binary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/mc/mc.nm b/mc/mc.nm
index 4830ff4d0424ac97e57d97d5466a1a9c2cec3a85..1fe8161a69b884c7c672e46cf17a927a4d300ede 100644 (file)
--- a/mc/mc.nm
+++ b/mc/mc.nm
@@ -5,7 +5,7 @@
 
 name       = mc
 version    = 4.8.29
-release    = 2
+release    = 3
 
 groups     = Applications/System
 url        = https://midnight-commander.org
@@ -40,6 +40,13 @@ build
                --enable-charset \
                --disable-rpath
 
+       configure_cmds
+               # Add some additional CFLAGS to the consaver Makefile to proper
+               # harden the binary.
+               sed -i '/^CFLAGS =/ s/$/ -fno-builtin-exit -D__noreturn__=/' \
+                       src/consaver/Makefile
+       end
+
        install_cmds
                # Fix permissions
                chmod 1755 %{BUILDROOT}/usr/lib/mc/cons.saver