From 0e14c97ad98ecf3345b3de711485d60f90cb377a Mon Sep 17 00:00:00 2001
From: jc_gargma <jc_gargma@iserlohn-fortress.net>
Date: Thu, 5 Sep 2019 23:54:28 -0700
Subject: Rebuild with -O3 -fstack-protector-all -flto -fPIE

---
 PKGBUILD                  | 7 +++++--
 dnscrypt-wrapper.sysusers | 4 ++--
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 1d53ba2..65b28f7 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,7 +7,7 @@
 
 pkgname=dnscrypt-wrapper
 pkgver=0.4.2
-pkgrel=2
+pkgrel=2.2
 pkgdesc="A server-side dnscrypt proxy"
 url="https://dnscrypt.org/"
 arch=('x86_64')
@@ -18,10 +18,13 @@ install=dnscrypt-wrapper.install
 source=("$pkgname-$pkgver.tar.gz::https://github.com/cofyc/dnscrypt-wrapper/archive/v$pkgver.tar.gz"
         "${pkgname}.sysusers")
 sha512sums=('f45afc6e0468c48ad9ded54cfd7d5314c68d49afda5faf3c7c3b6f8f41f77501565967ba6666f3723ba735c8d7f8d98a7777010a4fcf215b3d76707411243400'
-            '5ac3ba08b7cd9221acba29b1fcee80ca5c443b4fed8691155388f574d9da7d103435e9fd846df9f646335dd0d9cab90fa19bfb4b8bea60ded62568aa5cc5f92f')
+            'aca4af03c12e0d7bf09c1870b6cc4e50caf7a9963b0c88b402c1a1c2de716d80fd63a14f8b143c79134ae23a7cb0a40fd75bc6d72a82d4f57520aef654493bc6')
 
 build() {
   cd $pkgname-$pkgver
+  export CFLAGS="$CFLAGS -O3 -fstack-protector-all -flto=4 -fPIE"
+  export CXXFLAGS="$CXXFLAGS -O3 -fstack-protector-all -flto=4 -fPIE"
+  export LDFLAGS="$LDFLAGS,-pie"
   make configure
   ./configure
   make
diff --git a/dnscrypt-wrapper.sysusers b/dnscrypt-wrapper.sysusers
index 52ee610..23b7066 100644
--- a/dnscrypt-wrapper.sysusers
+++ b/dnscrypt-wrapper.sysusers
@@ -1,2 +1,2 @@
-u dnscrypt-wrapper - "DnsCrypt Wrapper" /etc/dnscrypt-wrapper /bin/false
-g dnscrypt-wrapper - - -
+u dnscrypt-wrapper - "DnsCrypt Wrapper" /etc/dnscrypt-wrapper /sbin/nologin
+g dnscrypt-wrapper -
-- 
cgit v1.2.1