From 20746dd85fbe810c19ef7e6dea76d3a110bb4a4d Mon Sep 17 00:00:00 2001
From: Marek Polacek <polacek@redhat.com>
Date: Fri, 3 May 2024 14:49:35 -0400
Subject: [PATCH] 14.0.1-0.17

Enable hardening and configure with --enable-host-pie --enable-host-bind-now on RHEL
---
 gcc.spec | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/gcc.spec b/gcc.spec
index 1e20d45..3a3ec20 100644
--- a/gcc.spec
+++ b/gcc.spec
@@ -8,9 +8,11 @@
 %global nvptx_tools_gitrev 9962793f41e016318dc5eca07ae602041cf526ff
 %global newlib_cygwin_gitrev d45261f62a15f8abd94a1031020b9a9f455e4eed
 %global _unpackaged_files_terminate_build 0
+%if 0%{?fedora:1}
 %global _performance_build 1
 # Hardening slows the compiler way too much.
 %undefine _hardened_build
+%endif
 %undefine _auto_set_build_flags
 %if 0%{?fedora} > 27 || 0%{?rhel} > 7
 # Until annobin is fixed (#1519165).
@@ -141,7 +143,7 @@
 Summary: Various compilers (C, C++, Objective-C, ...)
 Name: gcc
 Version: %{gcc_version}
-Release: %{gcc_release}.16%{?dist}
+Release: %{gcc_release}.17%{?dist}
 # License notes for some of the less obvious ones:
 #   gcc/doc/cppinternals.texi: Linux-man-pages-copyleft-2-para
 #   isl: MIT, BSD-2-Clause
@@ -1270,6 +1272,9 @@ CONFIGURE_OPTS="\
 %ifnarch %{arm}
 	--with-build-config=bootstrap-lto --enable-link-serialization=1 \
 %endif
+%endif
+%if 0%{?rhel:1}
+	--enable-host-pie --enable-host-bind-now \
 %endif
 	"
 
@@ -3623,6 +3628,10 @@ end
 %endif
 
 %changelog
+* Fri May  3 2024 Marek Polacek <polacek@redhat.com> 14.0.1-0.17
+- enable hardening and configure with --enable-host-pie --enable-host-bind-now
+  on RHEL
+
 * Tue Apr 30 2024 Jakub Jelinek <jakub@redhat.com> 14.0.1-0.16
 - update from trunk and releases/gcc-14 branch
   - GCC 14.1.0-rc1