From f58eeaae2ea634ac387432d4df3035bc953d63c8 Mon Sep 17 00:00:00 2001
From: dim <dim@FreeBSD.org>
Date: Tue, 15 Feb 2011 22:03:09 +0000
Subject: Fix some leftover binaries and shared libraries in the system that
 still have an executable stack, due to linking in hand-assembled .S or .s
 files, that have no .GNU-stack sections:

RWX --- ---  /lib/libcrypto.so.6
RWX --- ---  /lib/libmd.so.5
RWX --- ---  /lib/libz.so.6
RWX --- ---  /lib/libzpool.so.2
RWX --- ---  /usr/lib/liblzma.so.5

These were found using scanelf, from the sysutils/pax-utils port.

Reviewed by:	kib
---
 secure/lib/libcrypto/Makefile | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'secure')

diff --git a/secure/lib/libcrypto/Makefile b/secure/lib/libcrypto/Makefile
index 0c01905..0a1704c 100644
--- a/secure/lib/libcrypto/Makefile
+++ b/secure/lib/libcrypto/Makefile
@@ -345,6 +345,10 @@ INCSDIR=	${INCLUDEDIR}/openssl
 
 CSTD=	gnu89
 
+.if !empty(SRCS:M*.s)
+AFLAGS+=	--noexecstack
+.endif
+
 CLEANFILES=	buildinf.h opensslconf.h evp.h
 
 buildinf.h: ${.CURDIR}/Makefile
-- 
cgit v1.1