Branch: refs/heads/stable1-proposed Home: https://github.com/kronosnet/kronosnet Commit: 84bd44321e9b18f7bcaed3dbdea27ecc545b4890 https://github.com/kronosnet/kronosnet/commit/84bd44321e9b18f7bcaed3dbdea27e... Author: Christine Caulfield ccaulfie@redhat.com Date: 2021-09-17 (Fri, 17 Sep 2021)

Changed paths: M build-aux/check.mk M configure.ac M libknet/Makefile.am M libknet/tests/Makefile.am M libnozzle/Makefile.am M libnozzle/tests/Makefile.am

Log Message: ----------- [build] Add annobin build/check support

the annobin check is enabled only if all compiler flags, linker flags and annocheck binary are available.

the build will use as many of the hardening options required to pass the annocheck regardless.

the check is performed / enabled only with gcc. clang currently suffers from some limitations to automatically detect the annobin plugin, that would increase drastacally the complexity of the build system unnecessarely.

implementation based on: - https://bugzilla.redhat.com/show_bug.cgi?id=1961686 - https://developers.redhat.com/blog/2019/02/04/annocheck-examining-the-conten... - https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm...

Original idea by Christine Caulfield ccaulfie@redhat.com

CentOS Stream CI insists on this but it's generally a 'good thing'

Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com