[Git][hardenedbsd/ports][hardenedbsd/main] HBSD: Potentially fix security/snowflake-tor

[Shawn Webb (@shawn.webb)]

Shawn Webb pushed to branch hardenedbsd/main at HardenedBSD / Ports


Commits:
1d193bbe by Shawn Webb at 2026-03-09T17:03:47+00:00
HBSD: Potentially fix security/snowflake-tor

We build golang binaries as PIEs by default. FreeBSD had specifically
added a -static flag, which is currently mutually exclusive with PIE.

Signed-off-by: Shawn Webb <shawn...@hardenedbsd.org>

- - - - -


1 changed file:

- security/snowflake-tor/Makefile


Changes:

=====================================
security/snowflake-tor/Makefile
=====================================
@@ -22,7 +22,7 @@ CPE_VENDOR= torproject
USE_HARDENING= pie:golang

GO_MODULE= gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/v2
-GO_BUILDFLAGS= -ldflags '${STRIP} -w -extldflags "-static"'
+GO_BUILDFLAGS= -ldflags '${STRIP} -w'
GO_PKGNAME= ${GO_MODULE}
GO_TARGET= ./broker ./client ./proxy ./server




View it on GitLab: https://git.hardenedbsd.org/hardenedbsd/ports/-/commit/1d193bbedcccbe8f96792b4432c615c00a704ffe

--
View it on GitLab: https://git.hardenedbsd.org/hardenedbsd/ports/-/commit/1d193bbedcccbe8f96792b4432c615c00a704ffe
You're receiving this email because of your account on git.hardenedbsd.org.