changeset 2565:85e4e1594c99 icedtea-3.0.0pre03

PR2377: PaX mark the installed JDK so it runs on hardened systems 2015-05-20 Andrew John Hughes <gnu_andrew@member.fsf.org> PR2377: PaX mark the installed JDK so it runs on hardened systems * Makefile.am: (install-exec-local): PaX mark installed JDK. * NEWS: Updated.
author Andrew John Hughes <gnu_andrew@member.fsf.org>
date Fri, 22 May 2015 06:00:33 +0100
parents 1b3c4b985949
children 10e7f91158ff
files ChangeLog Makefile.am NEWS
diffstat 3 files changed, 10 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Fri May 22 05:55:33 2015 +0100
+++ b/ChangeLog	Fri May 22 06:00:33 2015 +0100
@@ -1,3 +1,11 @@
+2015-05-20  Andrew John Hughes  <gnu_andrew@member.fsf.org>
+
+	PR2377: PaX mark the installed JDK so it runs
+	on hardened systems
+	* Makefile.am:
+	(install-exec-local): PaX mark installed JDK.
+	* NEWS: Updated.
+
 2015-05-20  Andrew John Hughes  <gnu_andrew@member.fsf.org>
 
 	PR2369: SunEC provider is partially installed
--- a/Makefile.am	Fri May 22 05:55:33 2015 +0100
+++ b/Makefile.am	Fri May 22 06:00:33 2015 +0100
@@ -2369,6 +2369,7 @@
 	for files in $(BUILD_SDK_DIR)/tapset/*.stp; do \
 	  $(INSTALL_DATA) $${files} $(DESTDIR)${prefix}/tapset; \
 	done
+	$(abs_top_builddir)/pax-mark-vm $(DESTDIR)${prefix}
 
 install-data-local:
 	${mkinstalldirs} $(DESTDIR)${prefix}
--- a/NEWS	Fri May 22 05:55:33 2015 +0100
+++ b/NEWS	Fri May 22 06:00:33 2015 +0100
@@ -71,6 +71,7 @@
   - PR2348: Avoid following symlinks for CACAO and JamVM patches
   - PR2363: Remove EC source code prior to build
   - PR2369: SunEC provider is partially installed
+  - PR2377: PaX mark the installed JDK so it runs on hardened systems
   - Don't substitute 'j' for '-j' inside -I directives
   - Extend 8041658 to all files in the HotSpot build.
   - Remove jcheck