Enable FULL RELRO and PIE

2 files changed, 10 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index b45e6ffbb431..9b8fc49a4353 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = dnsproxy-adguard
 	pkgdesc = Simple DNS proxy with DoH, DoT, and DNSCrypt support by AdguardTeam
 	pkgver = 0.51.0
-	pkgrel = 1
+	pkgrel = 2
 	url = https://github.com/AdguardTeam/dnsproxy
 	arch = x86_64
 	arch = aarch64
diff --git a/PKGBUILD b/PKGBUILD
index 67add93e17a1..65d78c2212b1 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,14 +5,14 @@
 _projectname=dnsproxy
 pkgname=dnsproxy-adguard
 pkgver=0.51.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Simple DNS proxy with DoH, DoT, and DNSCrypt support by AdguardTeam"
 arch=('x86_64' 'aarch64')
 url="https://github.com/AdguardTeam/dnsproxy"
 license=('Apache')
 source=("dnsproxy-adguard.service"
         "dnsproxy-adguard"
-       "${_projectname}-${pkgver}.tar.gz::https://github.com/AdguardTeam/dnsproxy/archive/v${pkgver}.tar.gz")
+        "${_projectname}-${pkgver}.tar.gz::https://github.com/AdguardTeam/dnsproxy/archive/v${pkgver}.tar.gz")
 makedepends=("go" "git")
 backup=(etc/conf.d/dnsproxy-adguard)
 sha256sums=('7d212da820b200b678edcffe2b23e56a6fc25f065acc051fbc6eaa76747795f1'
@@ -21,7 +21,13 @@ sha256sums=('7d212da820b200b678edcffe2b23e56a6fc25f065acc051fbc6eaa76747795f1'
 
 build(){
     cd "${srcdir}/${_projectname}-${pkgver}"
-    go build
+    go build \
+        -trimpath \
+        -buildmode=pie \
+        -mod=readonly \
+        -modcacherw \
+        -ldflags "-linkmode external -extldflags \"${LDFLAGS}\"" \
+        .
 }
 
 package() {