pacman-5.0.2-2.parabola1: enable full RELRO and BIND_NOW

1 files changed, 11 insertions, 10 deletions

diff --git a/libre/pacman/PKGBUILD b/libre/pacman/PKGBUILD
index 8139b625c..74934a55a 100644
--- a/libre/pacman/PKGBUILD
+++ b/libre/pacman/PKGBUILD
@@ -2,15 +2,16 @@
 # $Id: PKGBUILD 268273 2016-05-18 05:54:54Z allan $
 # Maintainer (Arch): Dan McGee <dan@archlinux.org>
 # Maintainer (Arch): Dave Reisner <dreisner@archlinux.org>
+# Contributor (Hyperbola): André Silva <emulatorman@hyperbola.info>
+# Contributor (Hyperbola): Márcio Silva <coadde@hyperbola.info>
 # Maintainer: Luke Shumaker <lukeshu@sbcglobal.net>
-# Contributor: André Silva <emulatorman@parabola.nu>
-# Contributor: Márcio Silva <coadde@parabola.nu>
+# Contributor: Omar Vega Ramos <ovruni@gnu.org.pe>
 # Contributor: Nicolás Reynolds <fauno@kiwwwi.com.ar>
 # Contributor: Daniel Milewski <niitotantei@riseup.net>
 
 pkgname=pacman
 pkgver=5.0.2
-pkgrel=1.parabola1
+pkgrel=2.parabola1
 pkgdesc="A library-based package manager with dependency support"
 arch=('i686' 'x86_64' 'armv7h')
 url="http://www.archlinux.org/pacman/"
@@ -48,9 +49,9 @@ sha256sums=('dfd36086ad68564bcd977f4a1fafe51dd328acd4a95093ac4bf1249be9c41f0e'
             '0d174c7c47921cfbb35dacb9d099095e78f6f67bfaa86836a3e588552f14ed03'
             '1df848c5038a3f81ae4dc79a4072d340109b02f56292a5c4a20c59f735edd2b3'
             '1cc4af1cf8e2133d4520827cc7d3ffad731892595f8e699909002d2e40ad8df9'
-            '16d1d426fd1365470891c918c2a82147fb80be97a47bfa0d8c547edbcad9b05c'
-            'c33246b876f8ba574077471bd71ff0e698d5b41ef0f9f34685dd17d417c1f204'
-            '414d65dffedf912af05b09fe6a55cd5144a8f39a5a280c1ad85c019e66ef5c83'
+            '6064bbf5b453ec50b25291cf9268c56cac4bca3ad80d47f2d6b62c82254e5461'
+            'dbadad986353ff90a390614f393a09ea07498fcf00467481bc58fbc07ac2d003'
+            '4187d385e173127df8ed6d358291f0a0b0c2581742d8859ad6b276bb6d703e49'
             '416efd44f4d52345871877fd1cb1674dc6e5c063d51f9fe0d723ca51e004595e')
 
 prepare() {
@@ -84,20 +85,20 @@ build() {
       i686)
         mycarch="i686"
         mychost="i686-pc-linux-gnu"
-        myflags="-march=i686 -mtune=generic -O2 -pipe -fstack-protector-strong"
+        myflags="-march=i686 -mtune=generic -O2 -pipe -fstack-protector-strong  -fno-plt"
         ;;
       x86_64)
         mycarch="x86_64"
         mychost="x86_64-pc-linux-gnu"
-        myflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong"
+        myflags="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong  -fno-plt"
         ;;
       armv7h)
         mycarch="armv7h"
         mychost="armv7l-unknown-linux-gnueabihf"
-        myflags="-march=armv7-a -mfloat-abi=hard -mfpu=vfpv3-d16 -O2 -pipe -fstack-protector --param=ssp-buffer-size=4"
+        myflags="-march=armv7-a -mfloat-abi=hard -mfpu=vfpv3-d16 -O2 -pipe -fstack-protector-strong -fno-plt"
         ;;
     esac
-    myldflags="-Wl,-O1,--sort-common,--as-needed,-z,relro"
+    myldflags="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"
 
     # set things correctly in the default conf file
     sed < "$srcdir/makepkg.conf.in" > "$srcdir/makepkg.conf.$carch" \