redirect router: taint-enforce filenames

[exim.git] / src / OS / Makefile-Linux

diff --git a/src/OS/Makefile-Linux b/src/OS/Makefile-Linux
index d07fed7381cbf2705301f5b12d15df5a91a6d76c..d1d501376afc48bb45d8462e5faf25f9a8266bb7 100644 (file)
--- a/src/OS/Makefile-Linux
+++ b/src/OS/Makefile-Linux
@@ -1,7 +1,9 @@
-# $Cambridge: exim/src/OS/Makefile-Linux,v 1.3 2008/07/25 20:39:55 fanf2 Exp $
-
 # Exim: OS-specific make file for Linux. This is for modern Linuxes,
 # which use libc6.
+#
+# For Linux, we assume GNU Make; at time of writing, the only extension
+# used is ?= which is actually portable to other maintained Make variants,
+# just is not POSIX.
 
 HAVE_ICONV=yes
 
@@ -10,12 +12,19 @@ CHOWN_COMMAND=look_for_it
 CHGRP_COMMAND=look_for_it
 CHMOD_COMMAND=look_for_it
 
-CFLAGS=-O -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE
+# The system cc may be gcc or clang; do not force gcc
+CC=cc
+# Preserve CFLAGS and CFLAGS_DYNAMIC from the caller/environment
+CFLAGS ?= -O -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE
+CFLAGS_DYNAMIC ?= -shared -rdynamic
+
+# We have mmap/malloc addr spaces separate
+CFLAGS += -DTAINT_CHECK_FAST
 
 DBMLIB = -ldb
 USE_DB = yes
 
-LIBS = -lnsl -lcrypt -lm
+LIBS = -lcrypt -lm
 LIBRESOLV = -lresolv
 
 X11=/usr/X11R6