svn commit: r398101 - head/security/suricata

Kubilay Kocak koobs at FreeBSD.org
Mon Sep 28 08:25:45 UTC 2015


Author: koobs
Date: Mon Sep 28 08:25:44 2015
New Revision: 398101
URL: https://svnweb.freebsd.org/changeset/ports/398101

Log:
  security/suricata: Disable -march=native
  
  Suricata currently builds with GCC -march=native by default.
  
  This can create problems if, for example, packages of this port are
  built on ATOM servers but installed on AMD processors. In these and
  other cases where the build host is not equal to the target host,
  suricata can generate an Illegal instruction and refuse
  to start.
  
  It is ultimately preferable to explicitly cross-build and/or optimize
  compilation for target architectures and processors. See: PEP20.
  
  PR:		203296
  Submitted by:	Olivier Cochard <olivier cochard me>
  Tested by:	Olivier Cochard <olivier cochard me>
  MFH:		2015Q3

Modified:
  head/security/suricata/Makefile

Modified: head/security/suricata/Makefile
==============================================================================
--- head/security/suricata/Makefile	Mon Sep 28 08:10:12 2015	(r398100)
+++ head/security/suricata/Makefile	Mon Sep 28 08:25:44 2015	(r398101)
@@ -3,7 +3,7 @@
 
 PORTNAME=	suricata
 PORTVERSION=	2.0.8
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	security
 MASTER_SITES=	http://www.openinfosecfoundation.org/download/ \
 		http://mirrors.rit.edu/zi/
@@ -105,6 +105,7 @@ CONFIGURE_ARGS+=--enable-gccprotect \
 		--with-libnet-libraries=${LOCALBASE}/lib/libnet11 \
 		--with-libhtp-includes=${LOCALBASE}/include/ \
 		--with-libhtp-libraries=${LOCALBASE}/lib \
+	        --disable-gccmarch-native \
 		--localstatedir=/var/
 
 LIBNET_CONFIG?=	${LOCALBASE}/bin/libnet11-config


More information about the svn-ports-all mailing list