From 5c8a9a11162873b8083f90b90272a96cf2700244 Mon Sep 17 00:00:00 2001
From: daidai_is_here <daiqianwen@huawei.com>
Date: Thu, 26 Dec 2019 14:55:11 +0800
Subject: [PATCH] modify sec option

---
 config_for_secure_g++ | 3 +++
 wxGTK3.spec           | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)
 create mode 100644 config_for_secure_g++

diff --git a/config_for_secure_g++ b/config_for_secure_g++
new file mode 100644
index 0000000..9c3e852
--- /dev/null
+++ b/config_for_secure_g++
@@ -0,0 +1,3 @@
+rpm_name:wxGTK3
+sec_opt:-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wtrampolines
+fs_opt:
diff --git a/wxGTK3.spec b/wxGTK3.spec
index 42a0bf2..4cbae48 100644
--- a/wxGTK3.spec
+++ b/wxGTK3.spec
@@ -111,7 +111,7 @@ sed -i -e 's|$CPPUNIT_CONFIG --version|$CPPUNIT_CONFIG --modversion|' configure
 %build
 CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
 CXXFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
-export LDFLAGS="-Wl,--as-needed"
+export LDFLAGS="-Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wl,--as-needed"
 export CPPUNIT_CONFIG="/usr/bin/pkg-config cppunit"
 
 %global _configure ../configure