Stefan Berger
08f1e70db6
build: Simplify the check for -fstack-protector-strong
...
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-10-26 11:23:19 -04:00
Stefan Berger
b080afb533
Build: Also search for the gawk tool
...
Extend configure.ac to also search for the gawk tool.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-10-26 10:56:54 -04:00
Stefan Berger
f77427eb0d
build: Check for -fstack-protector-strong before using it
...
Import AX_CHECK_COMPILE_FLAG to help check for compiler option
-fstack-protector-strong.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-10-26 10:49:07 -04:00
Stefan Berger
39d0c3ded0
man pages: Add man page describing the ioctl's
...
This patch adds a man page that describes the supported ioctl's.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-10-03 18:42:31 -04:00
Stefan Berger
a76b4eebc2
build: only apply hardening CFLAGS if -O0 is not used
...
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-08-04 11:55:31 -04:00
Stefan Berger
3cb54a5d35
build: install /var/lib/swtpm-localca with proper owner
...
Install /var/lib/swtpm-localca so that tss can access it.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-05-04 00:31:44 -04:00
Stefan Berger
48abfbb1c0
Expect tool is required
...
Check for the expect tool in configure.
Require the expect tool in the spec file.
2015-04-01 22:39:17 -04:00
Stefan Berger
e6085e9615
Add some hardening flags to compiler and linker
...
Protect the stack, create position indep. executables, use Relocation
Read-Only (RELRO) and have the linker resolve all symbols upon
program start.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-01-30 17:08:40 -05:00
Stefan Berger
213677a217
Fix cut and paste error
...
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2014-12-22 15:54:01 -05:00
Stefan Berger
ec37bb56cb
Make SELinux policy extension support chooseable
...
Extend configure.ac to make SELinux policy extension support
chooseable. By default configure will check whether SELinux
support is installed on the local system and will add SELinux
policy extension support if support is found.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2014-12-19 09:28:47 -05:00
Stefan Berger
3bbdd7bc76
Support for openssl
...
Also support swtpm using OpenSSL library.
Introduce --with-openssl in configure.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2014-12-18 22:19:57 -05:00
Stefan Berger
833a54165e
Check for missing freebl headers and freebl lib
...
Add a check for missing freebl header blapi.h (missing in Ubuntu)
and missing freebl static library that provides AES_CreateContext.
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2014-12-18 11:04:22 -05:00
Stefan Berger
09c58b7003
Make compileable on RHEL 7 for ppc64
...
There are some tiny adjustments needed for linking on RHEL 7 for ppc64.
Otherwise it works there now as well.
2014-12-09 20:10:00 -05:00
Stefan Berger
baecda4040
Link programs with minimal set of libraries
...
Don't build up a global LIBS variable but put the libraries into
individual variables that can be used for linking individual programs
with. Do the same for CFLAGS.
2014-12-09 19:59:27 -05:00
Stefan Berger
095168973d
Improve on the list of dependencies.
...
Update the list of rpm dependencies referred to in INSTALL and
configure.ac and the spec file.
2014-12-09 13:42:17 -05:00
Stefan Berger
e46a2b6686
merging swtpm-tools into this project
2014-12-05 13:43:21 -05:00
Stefan Berger
f163b20210
initial check-in
2014-12-05 11:16:03 -05:00