[kronosnet/kronosnet] 9a8fd8: [build] Add annobin build/check support

Branch: refs/heads/master Home: https://github.com/kronosnet/kronosnet Commit: 9a8fd89bf52c8381f7c46f427a024eb3d70d0ccf https://github.com/kronosnet/kronosnet/commit/9a8fd89bf52c8381f7c46f427a024… Author: Christine Caulfield <ccaulfie(a)redhat.com> Date: 2021-09-16 (Thu, 16 Sep 2021) Changed paths: M build-aux/check.mk M configure.ac M libknet/Makefile.am M libknet/tests/Makefile.am M libnozzle/Makefile.am M libnozzle/tests/Makefile.am Log Message: ----------- [build] Add annobin build/check support the annobin check is enabled only if all compiler flags, linker flags and annocheck binary are available. the build will use as many of the hardening options required to pass the annocheck regardless. the check is performed / enabled only with gcc. clang currently suffers from some limitations to automatically detect the annobin plugin, that would increase drastacally the complexity of the build system unnecessarely. implementation based on: - https://bugzilla.redhat.com/show_bug.cgi?id=1961686 - https://developers.redhat.com/blog/2019/02/04/annocheck-examining-the-conte… - https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht… Original idea by Christine Caulfield <ccaulfie(a)redhat.com> CentOS Stream CI insists on this but it's generally a 'good thing' Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Commit: 50e5e806bf0b05428f57a3546aa34d1d5790390b https://github.com/kronosnet/kronosnet/commit/50e5e806bf0b05428f57a3546aa34… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2021-09-17 (Fri, 17 Sep 2021) Changed paths: M build-aux/check.mk M configure.ac M libknet/Makefile.am M libknet/tests/Makefile.am M libnozzle/Makefile.am M libnozzle/tests/Makefile.am Log Message: ----------- Merge pull request #361 from kronosnet/stack-clash-protection [build] Add annobin build/check support Compare: https://github.com/kronosnet/kronosnet/compare/f8ef822486a9...50e5e806bf0b