diff options
| author | dim <dim@FreeBSD.org> | 2011-02-15 22:03:09 +0000 |
|---|---|---|
| committer | dim <dim@FreeBSD.org> | 2011-02-15 22:03:09 +0000 |
| commit | f58eeaae2ea634ac387432d4df3035bc953d63c8 (patch) | |
| tree | ed19a330dc5f9d0725baedab2bf3317a6ec2fae8 /secure | |
| parent | be13e396c9ec1ab7dc7f7c4cd04e66bcb6530c43 (diff) | |
| download | FreeBSD-src-f58eeaae2ea634ac387432d4df3035bc953d63c8.zip FreeBSD-src-f58eeaae2ea634ac387432d4df3035bc953d63c8.tar.gz | |
Fix some leftover binaries and shared libraries in the system that still
have an executable stack, due to linking in hand-assembled .S or .s
files, that have no .GNU-stack sections:
RWX --- --- /lib/libcrypto.so.6
RWX --- --- /lib/libmd.so.5
RWX --- --- /lib/libz.so.6
RWX --- --- /lib/libzpool.so.2
RWX --- --- /usr/lib/liblzma.so.5
These were found using scanelf, from the sysutils/pax-utils port.
Reviewed by: kib
Diffstat (limited to 'secure')
| -rw-r--r-- | secure/lib/libcrypto/Makefile | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/secure/lib/libcrypto/Makefile b/secure/lib/libcrypto/Makefile index 0c01905..0a1704c 100644 --- a/secure/lib/libcrypto/Makefile +++ b/secure/lib/libcrypto/Makefile @@ -345,6 +345,10 @@ INCSDIR= ${INCLUDEDIR}/openssl CSTD= gnu89 +.if !empty(SRCS:M*.s) +AFLAGS+= --noexecstack +.endif + CLEANFILES= buildinf.h opensslconf.h evp.h buildinf.h: ${.CURDIR}/Makefile |
