From 6ad07de4403388f4b5c0543527fbb29bb317048f Mon Sep 17 00:00:00 2001

From: Alexey Gladkov <legion@altlinux.org>

Date: Fri, 14 Oct 2016 01:17:05 +0300

Subject: [PATCH] OPENSUSE Compile the sandbox with -fPIE settings

---

 sandbox/linux/BUILD.gn | 3 ++-

 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sandbox/linux/BUILD.gn b/sandbox/linux/BUILD.gn

index 2f778dd0bca..a0a07f21f01 100644

--- a/sandbox/linux/BUILD.gn

+++ b/sandbox/linux/BUILD.gn

@@ -315,26 +315,27 @@ if (is_linux || is_chromeos) {

     sources = [

       "suid/common/sandbox.h",

       "suid/common/suid_unsafe_environment_variables.h",

       "suid/process_util.h",

       "suid/process_util_linux.c",

       "suid/sandbox.c",

     ]

     cflags = [

       # For ULLONG_MAX

-      "-std=gnu99",

+      "-std=gnu99", "-fPIE",

       # These files have a suspicious comparison.

       # TODO fix this and re-enable this warning.

       "-Wno-sign-compare",

     ]

+    ldflags = [ "-pie" ]

   }

 }

 component("sandbox_services") {

   sources = [

     "services/init_process_reaper.cc",

     "services/init_process_reaper.h",

     "services/proc_util.cc",

     "services/proc_util.h",

     "services/resource_limits.cc",

-- 

2.25.4