cc-oci-runtime icon indicating copy to clipboard operation
cc-oci-runtime copied to clipboard

Consider building all packages with best practice security options

Open jodh-intel opened this issue 7 years ago • 1 comments

The following commits improved the build options for the runtime:

  • a76a2f54c74709ec7a02cbb48a0b57dff631e614
  • df38461c29624600b621e9117729ca8d79c872a0
  • 7815d4f464a8b212c8f2a24f97237ab7cf7860d4

... but our install scripts also build other packages which have not had these flags applied:

  • https://github.com/01org/cc-oci-runtime/blob/master/installation/rhel-setup.sh
  • https://github.com/01org/cc-oci-runtime/blob/master/installation/installation-setup.sh

Further, these options are not applied to OBS package builds for packages other than the runtime.

We should assess if all the new options we've added to the runtime can be applied to all other packages built in all environments.

jodh-intel avatar Apr 27 '17 09:04 jodh-intel