%ifarch %{ix86}

%global kvm_package   system-x86

# need_qemu_kvm should only ever be used by x86

%global need_qemu_kvm 1

%endif

%ifarch x86_64

%global kvm_package   system-x86

# need_qemu_kvm should only ever be used by x86

%global need_qemu_kvm 1

%endif

%ifarch %{power64}

%global kvm_package   system-ppc

%endif

%ifarch s390x

%global kvm_package   system-s390x

%endif

%ifarch armv7hl

%global kvm_package   system-arm

%endif

%ifarch aarch64

%global kvm_package   system-aarch64

%endif

%ifarch %{mips}

%global kvm_package   system-mips

%endif

%global user_static 1

# glibc static libs are fubar on i386, s390 & ppc64*

# https://bugzilla.redhat.com/show_bug.cgi?id=1352625

%ifarch %{?ix86} s390 s390x %{power64}

%global user_static 0

%endif

%global have_kvm 0

%if 0%{?kvm_package:1}

%global have_kvm 1

%endif

%ifarch %{ix86} x86_64 %{arm} aarch64 %{power64} s390 s390x %{mips}

%global have_seccomp 1

%endif

%ifarch %{ix86} x86_64

%global have_spice   1

%endif

# Xen is available only on i386 x86_64 (from libvirt spec)

%ifarch %{ix86} x86_64

%global have_xen 1

%endif

# Matches edk2.spec ExclusiveArch

%ifarch %{ix86} x86_64 %{arm} aarch64

%global have_edk2 1

%endif

# Temp hack for https://bugzilla.redhat.com/show_bug.cgi?id=1343892

# We'll manually turn on hardened build later in this spec

%undefine _hardened_build

# Release candidate version tracking

# global rcver rc3

%if 0%{?rcver:1}

%global rcrel .%{rcver}

%global rcstr -%{rcver}

%endif

Summary: QEMU is a FAST! processor emulator

Name: qemu

Version: 2.7.0

Release: 6%{?rcrel}%{?dist}

Epoch: 2

License: GPLv2+ and LGPLv2+ and BSD

Group: Development/Tools

URL: http://www.qemu.org/

Source0: http://wiki.qemu-project.org/download/%{name}-%{version}%{?rcstr}.tar.bz2

Source1: qemu.binfmt

# Creates /dev/kvm

Source3: 80-kvm.rules

# KSM control scripts

Source4: ksm.service

Source5: ksm.sysconfig

Source6: ksmctl.c

Source7: ksmtuned.service

Source8: ksmtuned

Source9: ksmtuned.conf

# guest agent service

Source10: qemu-guest-agent.service

# guest agent udev rules

Source11: 99-qemu-guest-agent.rules

# /etc/qemu/bridge.conf

Source12: bridge.conf

# qemu-kvm back compat wrapper installed as /usr/bin/qemu-kvm

Source13: qemu-kvm.sh

# /etc/modprobe.d/kvm.conf

Source20: kvm.conf

# /etc/sysctl.d/50-kvm-s390x.conf

Source21: 50-kvm-s390x.conf

# /etc/security/limits.d/95-kvm-ppc64-memlock.conf

Source22: 95-kvm-ppc64-memlock.conf

# CVE-2016-7155: pvscsi: OOB read and infinite loop (bz #1373463)

Patch0001: 0001-vmw_pvscsi-check-page-count-while-initialising-descr.patch

# CVE-2016-7156: pvscsi: infinite loop when building SG list (bz #1373480)

Patch0002: 0002-scsi-pvscsi-limit-loop-to-fetch-SG-list.patch

# CVE-2016-7156: pvscsi: infinite loop when processing IO requests (bz

# #1373480)

Patch0003: 0003-scsi-pvscsi-limit-process-IO-loop-to-ring-size.patch

# CVE-2016-7170: vmware_vga: OOB stack memory access (bz #1374709)

Patch0004: 0004-vmsvga-correct-bitmap-and-pixmap-size-checks.patch

# CVE-2016-7157: mptsas: invalid memory access (bz #1373505)

Patch0005: 0005-scsi-mptconfig-fix-an-assert-expression.patch

Patch0006: 0006-scsi-mptconfig-fix-misuse-of-MPTSAS_CONFIG_PACK.patch

# CVE-2016-7466: usb: xhci memory leakage during device unplug (bz #1377838)

Patch0007: 0007-usb-xhci-fix-memory-leak-in-usb_xhci_exit.patch

# CVE-2016-7423: scsi: mptsas: OOB access (bz #1376777)

Patch0008: 0008-scsi-mptsas-use-g_new0-to-allocate-MPTSASRequest-obj.patch

# CVE-2016-7422: virtio: null pointer dereference (bz #1376756)

Patch0009: 0009-virtio-add-check-for-descriptor-s-mapped-address.patch

# CVE-2016-7908: net: Infinite loop in mcf_fec_do_tx (bz #1381193)

Patch0010: 0010-net-mcf-limit-buffer-descriptor-count.patch

# CVE-2016-8576: usb: xHCI: infinite loop vulnerability (bz #1382322)

Patch0011: 0011-xhci-limit-the-number-of-link-trbs-we-are-willing-to.patch

# CVE-2016-7995: usb: hcd-ehci: memory leak (bz #1382669)

Patch0012: 0012-usb-ehci-fix-memory-leak-in-ehci_process_itd.patch

# Fix interrupt endpoints not working with network/spice USB redirection on

# guest with an emulated xhci controller (bz #1382331)

Patch0013: 0013-usb-redir-allocate-buffers-before-waking-up-the-host.patch

# Fix nested PPC 'Unknown MMU model' error (bz #1374749)

Patch0014: 0014-ppc-kvm-Mark-64kB-page-size-support-as-disabled-if-n.patch

# Fix flickering display with boxes + wayland VM (bz #1266484)

Patch0015: 0015-qxl-Only-emit-QXL_INTERRUPT_CLIENT_MONITORS_CONFIG-o.patch

# documentation deps

BuildRequires: texi2html

BuildRequires: texinfo

# For /usr/bin/pod2man

BuildRequires: perl-podlators

# For sanity test

BuildRequires: qemu-sanity-check-nodeps

BuildRequires: kernel

# For acpi compilation

BuildRequires: iasl

# For chrpath calls in specfile

BuildRequires: chrpath

# -display sdl support

BuildRequires: SDL2-devel

# used in various places for compression

BuildRequires: zlib-devel

# used in various places for crypto

BuildRequires: gnutls-devel

# VNC sasl auth support

BuildRequires: cyrus-sasl-devel

# aio implementation for block drivers

BuildRequires: libaio-devel

# pulseaudio audio output

BuildRequires: pulseaudio-libs-devel

# alsa audio output

BuildRequires: alsa-lib-devel

# iscsi drive support

BuildRequires: libiscsi-devel

# NFS drive support

BuildRequires: libnfs-devel

# snappy compression for memory dump

BuildRequires: snappy-devel

# lzo compression for memory dump

BuildRequires: lzo-devel

# needed for -display curses

BuildRequires: ncurses-devel

# used by 9pfs

BuildRequires: libattr-devel

BuildRequires: libcap-devel

# used by qemu-bridge-helper

BuildRequires: libcap-ng-devel

# spice usb redirection support

BuildRequires: usbredir-devel >= 0.5.2

%ifnarch s390 s390x

# tcmalloc support

BuildRequires: gperftools-devel

%endif

%if 0%{?have_spice:1}

# spice graphics support

BuildRequires: spice-protocol >= 0.12.2

BuildRequires: spice-server-devel >= 0.12.0

%endif

%if 0%{?have_seccomp:1}

# seccomp containment support

BuildRequires: libseccomp-devel >= 2.3.0

%endif

# For network block driver

BuildRequires: libcurl-devel

# For rbd block driver

BuildRequires: ceph-devel >= 0.61

# We need both because the 'stap' binary is probed for by configure

BuildRequires: systemtap

BuildRequires: systemtap-sdt-devel

# For VNC JPEG support

BuildRequires: libjpeg-devel

# For VNC PNG support

BuildRequires: libpng-devel

# For uuid generation

BuildRequires: libuuid-devel

# For BlueZ device support

BuildRequires: bluez-libs-devel

# For Braille device support

BuildRequires: brlapi-devel

# For FDT device tree support

BuildRequires: libfdt-devel

# Hard requirement for version >= 1.3

BuildRequires: pixman-devel

# For gluster support

BuildRequires: glusterfs-devel >= 3.4.0

BuildRequires: glusterfs-api-devel >= 3.4.0

# Needed for usb passthrough for qemu >= 1.5

BuildRequires: libusbx-devel

# SSH block driver

BuildRequires: libssh2-devel

# GTK frontend

BuildRequires: gtk3-devel

BuildRequires: vte3-devel

# GTK translations

BuildRequires: gettext

# RDMA migration

%ifnarch s390 s390x

BuildRequires: librdmacm-devel

%endif

%if 0%{?have_xen:1}

# Xen support

BuildRequires: xen-devel

%endif

%ifarch %{ix86} x86_64 aarch64

# qemu 2.1: needed for memdev hostmem backend

BuildRequires: numactl-devel

%endif

# qemu 2.3: reading bzip2 compressed dmg images

BuildRequires: bzip2-devel

# qemu 2.4: needed for opengl bits

BuildRequires: libepoxy-devel

# qemu 2.5: needed for TLS test suite

BuildRequires: libtasn1-devel

# qemu 2.5: libcacard is it's own project now

BuildRequires: libcacard-devel >= 2.5.0

# qemu 2.5: virgl 3d support

BuildRequires: virglrenderer-devel

# qemu 2.6: Needed for gtk GL support

BuildRequires: mesa-libgbm-devel

BuildRequires: glibc-static pcre-static glib2-static zlib-static

Requires: %{name}-user = %{epoch}:%{version}-%{release}

Requires: %{name}-system-alpha = %{epoch}:%{version}-%{release}

Requires: %{name}-system-arm = %{epoch}:%{version}-%{release}

Requires: %{name}-system-cris = %{epoch}:%{version}-%{release}

Requires: %{name}-system-lm32 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-m68k = %{epoch}:%{version}-%{release}

Requires: %{name}-system-microblaze = %{epoch}:%{version}-%{release}

Requires: %{name}-system-mips = %{epoch}:%{version}-%{release}

Requires: %{name}-system-or32 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-ppc = %{epoch}:%{version}-%{release}

Requires: %{name}-system-s390x = %{epoch}:%{version}-%{release}

Requires: %{name}-system-sh4 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-sparc = %{epoch}:%{version}-%{release}

Requires: %{name}-system-unicore32 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-x86 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-xtensa = %{epoch}:%{version}-%{release}

Requires: %{name}-system-moxie = %{epoch}:%{version}-%{release}

Requires: %{name}-system-aarch64 = %{epoch}:%{version}-%{release}

Requires: %{name}-system-tricore = %{epoch}:%{version}-%{release}

Requires: %{name}-img = %{epoch}:%{version}-%{release}

%description

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation. QEMU has two operating modes:

 * Full system emulation. In this mode, QEMU emulates a full system (for

   example a PC), including a processor and various peripherials. It can be

   used to launch different Operating Systems without rebooting the PC or

   to debug system code.

 * User mode emulation. In this mode, QEMU can launch Linux processes compiled

   for one CPU on another CPU.

As QEMU requires no host kernel patches to run, it is safe and easy to use.

%package  common

Summary: QEMU common files needed by all QEMU targets

Group: Development/Tools

Requires(post): /usr/bin/getent

Requires(post): /usr/sbin/groupadd

Requires(post): /usr/sbin/useradd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%description common

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the common files needed by all QEMU targets

%package -n ksm

Summary: Kernel Samepage Merging services

Group: Development/Tools

Requires(post): systemd-units

Requires(postun): systemd-units

%description -n ksm

Kernel Samepage Merging (KSM) is a memory-saving de-duplication feature,

that merges anonymous (private) pages (not pagecache ones).

This package provides service files for disabling and tuning KSM.

%package guest-agent

Summary: QEMU guest agent

Group: System Environment/Daemons

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%description guest-agent

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides an agent to run inside guests, which communicates

with the host over a virtio-serial channel named "org.qemu.guest_agent.0"

This package does not need to be installed on the host OS.

%package  img

Summary: QEMU command line tool for manipulating disk images

Group: Development/Tools

%description img

This package provides a command line tool for manipulating disk images

%package -n ivshmem-tools

Summary: Client and server for QEMU ivshmem device

Group: Development/Tools

%description -n ivshmem-tools

This package provides client and server tools for QEMU's ivshmem device.

%if %{have_kvm}

%package kvm

Summary: QEMU metapackage for KVM support

Group: Development/Tools

Requires: qemu-%{kvm_package} = %{epoch}:%{version}-%{release}

%description kvm

This is a meta-package that provides a qemu-system-<arch> package for native

architectures where kvm can be enabled. For example, in an x86 system, this

will install qemu-system-x86

%endif

%package user

Summary: QEMU user mode emulation of qemu targets

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

Requires(post): systemd-units

Requires(postun): systemd-units

# On upgrade, make qemu-user get replaced with qemu-user + qemu-user-binfmt

Obsoletes: %{name}-user < 2:2.6.0-5%{?dist}

%description user

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the user mode emulation of qemu targets

%package user-binfmt

Summary: QEMU user mode emulation of qemu targets

Group: Development/Tools

Requires: %{name}-user = %{epoch}:%{version}-%{release}

Requires(post): systemd-units

Requires(postun): systemd-units

# qemu-user-binfmt + qemu-user-static both provide binfmt rules

Conflicts: %{name}-user-static

# On upgrade, make qemu-user get replaced with qemu-user + qemu-user-binfmt

Obsoletes: %{name}-user < 2:2.6.0-5%{?dist}

%description user-binfmt

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the user mode emulation of qemu targets

%if %{user_static}

%package user-static

Summary: QEMU user mode emulation of qemu targets static build

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

Requires(post): systemd-units

Requires(postun): systemd-units

# qemu-user-binfmt + qemu-user-static both provide binfmt rules

Conflicts: %{name}-user-binfmt

Provides: %{name}-user-binfmt

%description user-static

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the user mode emulation of qemu targets built as

static binaries

%endif

%package system-x86

Summary: QEMU system emulator for x86

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

Provides: kvm = 85

Obsoletes: kvm < 85

Requires: seavgabios-bin

# virtio-blk booting is broken for Windows guests

# if you mix seabios 1.7.4 and qemu 2.1.x

Requires: seabios-bin >= 1.7.5

Requires: sgabios-bin

Requires: ipxe-roms-qemu

%if 0%{?have_edk2:1}

Requires: edk2-ovmf

%endif

%if 0%{?have_seccomp:1}

Requires: libseccomp >= 1.0.0

%endif

%description system-x86

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for x86. When being run in a x86

machine that supports it, this package also provides the KVM virtualization

platform.

%package system-alpha

Summary: QEMU system emulator for Alpha

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-alpha

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Alpha systems.

%package system-arm

Summary: QEMU system emulator for ARM

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-arm

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for ARM boards.

%package system-mips

Summary: QEMU system emulator for MIPS

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-mips

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for MIPS boards.

%package system-cris

Summary: QEMU system emulator for CRIS

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-cris

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for CRIS boards.

%package system-lm32

Summary: QEMU system emulator for LatticeMico32

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-lm32

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for LatticeMico32 boards.

%package system-m68k

Summary: QEMU system emulator for ColdFire (m68k)

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-m68k

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for ColdFire boards.

%package system-microblaze

Summary: QEMU system emulator for Microblaze

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-microblaze

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Microblaze boards.

%package system-or32

Summary: QEMU system emulator for OpenRisc32

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-or32

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for OpenRisc32 boards.

%package system-s390x

Summary: QEMU system emulator for S390

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-s390x

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for S390 systems.

%package system-sh4

Summary: QEMU system emulator for SH4

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-sh4

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for SH4 boards.

%package system-sparc

Summary: QEMU system emulator for SPARC

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

Requires: openbios

%description system-sparc

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for SPARC and SPARC64 systems.

%package system-ppc

Summary: QEMU system emulator for PPC

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

Requires: openbios

Requires: SLOF

%description system-ppc

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for PPC and PPC64 systems.

%package system-xtensa

Summary: QEMU system emulator for Xtensa

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-xtensa

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Xtensa boards.

%package system-unicore32

Summary: QEMU system emulator for Unicore32

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-unicore32

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Unicore32 boards.

%package system-moxie

Summary: QEMU system emulator for Moxie

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-moxie

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Moxie boards.

%package system-aarch64

Summary: QEMU system emulator for AArch64

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%if 0%{?have_edk2:1}

Requires: edk2-aarch64

%endif

%description system-aarch64

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for AArch64.

%package system-tricore

Summary: QEMU system emulator for tricore

Group: Development/Tools

Requires: %{name}-common = %{epoch}:%{version}-%{release}

%description system-tricore

QEMU is a generic and open source processor emulator which achieves a good

emulation speed by using dynamic translation.

This package provides the system emulator for Tricore.

%prep

%setup -q -n qemu-%{version}%{?rcstr}

%autopatch -p1

%build

# QEMU already knows how to set _FORTIFY_SOURCE

%global optflags %(echo %{optflags} | sed 's/-Wp,-D_FORTIFY_SOURCE=2//')

# drop -g flag to prevent memory exhaustion by linker

%ifarch s390

%global optflags %(echo %{optflags} | sed 's/-g//')

sed -i.debug 's/"-g $CFLAGS"/"$CFLAGS"/g' configure

%endif

# OOM killer breaks builds with parallel make on s390(x)

%ifarch s390 s390x

%global _smp_mflags %{nil}

%endif

# --build-id option is used for giving info to the debug packages.

extraldflags="-Wl,--build-id";

buildldflags="VL_LDFLAGS=-Wl,--build-id"

# As of qemu 2.1, --enable-trace-backends supports multiple backends,

# but there's a performance impact for non-dtrace so we don't use them

tracebackends="dtrace"

system_arch="\

  aarch64 \

  alpha \

  arm \

  cris \

  i386 \

  lm32 \

  m68k \

  microblaze \

  microblazeel \

  mips \

  mips64 \

  mips64el \

  mipsel \

  moxie \

  or32 \

  ppc \

  ppc64 \

  ppcemb \

  s390x \

  sh4 \

  sh4eb \

  sparc \

  sparc64 \

  tricore \

  unicore32 \

  x86_64 \

  xtensa \

  xtensaeb"

user_arch="\

  aarch64 \

  alpha \

  arm \

  armeb \

  cris \

  i386 \

  m68k \

  microblaze \

  microblazeel \

  mips \

  mips64 \

  mips64el \

  mipsel \

  mipsn32 \

  mipsn32el \

  or32 \

  ppc \

  ppc64 \

  ppc64abi32 \

  ppc64le \

  s390x \

  sh4 \

  sh4eb \

  sparc \

  sparc32plus \

  sparc64 \

  unicore32 \

  x86_64"

dynamic_targets=

static_targets=

for arch in $system_arch

do

  dynamic_targets="$dynamic_targets $arch-softmmu"

done

for arch in $user_arch

do

  dynamic_targets="$dynamic_targets $arch-linux-user"

  static_targets="$static_targets $arch-linux-user"

done

# gperftools providing tcmalloc is not ported to s390(x)

%ifarch s390 s390x

    %global tcmallocflag --disable-tcmalloc

%else

    %global tcmallocflag --enable-tcmalloc

%endif

%if 0%{?have_spice:1}

    %global spiceflag --enable-spice

%else

    %global spiceflag --disable-spice

%endif

mkdir build-dynamic

pushd build-dynamic

../configure \

    --prefix=%{_prefix} \

    --libdir=%{_libdir} \

    --sysconfdir=%{_sysconfdir} \

    --interp-prefix=%{_prefix}/qemu-%%M \

    --localstatedir=%{_localstatedir} \

    --libexecdir=%{_libexecdir} \

    --with-pkgversion=%{name}-%{version}-%{release} \

    --tls-priority=@QEMU,SYSTEM \

    --disable-strip \

%ifnarch aarch64

    --extra-ldflags="$extraldflags -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -pie -Wl,-z,relro -Wl,-z,now" \

    --extra-cflags="%{optflags} -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1" \

%endif

%ifarch aarch64

    --extra-ldflags="$extraldflags -specs=/usr/lib/rpm/redhat/redhat-hardened-ld" \

    --extra-cflags="%{optflags} -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fPIC" \

%endif

    --enable-pie \

    --disable-werror \

    --disable-xfsctl \

    --target-list="$dynamic_targets" \

    --audio-drv-list=pa,sdl,alsa,oss \

    --enable-trace-backend=$tracebackends \

    --enable-kvm \

    %{tcmallocflag} \

    %{spiceflag} \

    --with-sdlabi="2.0" \

    --with-gtkabi="3.0" \

%ifarch s390 %{mips64}

    --enable-tcg-interpreter \

%endif

    "$@" || cat config.log

echo "config-host.mak contents:"