fix packages to be compile with stack protector

- libtool do not pass -fstack-protector while linking,
  but this is required to successfully link libraries or
  executables with SSP
- pass LDFLAGS for non-libtool packages

2 files changed, 34 insertions, 0 deletions

diff --git a/package/scanlogd/patches/patch-Makefile b/package/scanlogd/patches/patch-Makefile
new file mode 100644
index 000000000..a2a239302
--- /dev/null
+++ b/package/scanlogd/patches/patch-Makefile
@@ -0,0 +1,14 @@
+--- scanlogd-2.2.6.orig/Makefile	2006-03-05 11:03:15.000000000 +0100
++++ scanlogd-2.2.6/Makefile	2011-01-17 12:03:48.000000000 +0100
+@@ -1,8 +1,8 @@
+-CC = gcc
++CC ?= gcc
+ LD = $(CC)
+ RM = rm -f
+-CFLAGS = -Wall -O2 -fomit-frame-pointer
+-LDFLAGS = -s
++CFLAGS ?= -Wall -O2 -fomit-frame-pointer
++LDFLAGS ?= -s
+ 
+ PCAP_H = -I/usr/include/pcap
+ PCAP_L = -lpcap
diff --git a/package/scanlogd/patches/patch-params_h b/package/scanlogd/patches/patch-params_h
new file mode 100644
index 000000000..b649c8f8d
--- /dev/null
+++ b/package/scanlogd/patches/patch-params_h
@@ -0,0 +1,20 @@
+--- scanlogd-2.2.6.orig/params.h	2006-03-05 11:13:56.000000000 +0100
++++ scanlogd-2.2.6/params.h	2011-01-17 11:35:06.000000000 +0100
+@@ -19,7 +19,7 @@
+  * An empty directory to chroot to.  The directory and its parent directories
+  * must not be writable by anyone but root.
+  */
+-#define SCANLOGD_CHROOT			"/var/empty"
++#define SCANLOGD_CHROOT			"/tmp/.scanlogd"
+ 
+ /*
+  * Device to monitor, if you're using libnids or libpcap directly. #undef
+@@ -29,7 +29,7 @@
+  * Recent versions of libpcap support magic device name "any" and recent
+  * libnids supports magic device name "all".
+  */
+-#undef SCANLOGD_DEVICE
++#define SCANLOGD_DEVICE "all"
+ 
+ /*
+  * Whether we want scanlogd to set the device into promiscuous mode, for