From c8a7642dcf4742963337e1c4e15b1263951c6ce6 Mon Sep 17 00:00:00 2001
From: Joe Orton <jorton@redhat.com>
Date: Feb 07 2018 10:55:31 +0000
Subject: restrict module DSO symbol exports


---

diff --git a/mod_wsgi-4.5.20-exports.patch b/mod_wsgi-4.5.20-exports.patch
new file mode 100644
index 0000000..97e5671
--- /dev/null
+++ b/mod_wsgi-4.5.20-exports.patch
@@ -0,0 +1,11 @@
+--- mod_wsgi-4.5.20/Makefile.in.exports
++++ mod_wsgi-4.5.20/Makefile.in
+@@ -28,7 +28,7 @@
+ all : src/server/mod_wsgi.la
+ 
+ src/server/mod_wsgi.la : $(SRCFILES)
+-	$(APXS) -c $(CPPFLAGS) $(CFLAGS) $(SRCFILES) $(LDFLAGS) $(LDLIBS)
++	$(APXS) -Wl,-export-symbols-regex -Wl,wsgi_module -c $(CPPFLAGS) $(CFLAGS) $(SRCFILES) $(LDFLAGS) $(LDLIBS)
+ 
+ $(DESTDIR)$(LIBEXECDIR) :
+ 	mkdir -p $@
diff --git a/mod_wsgi.spec b/mod_wsgi.spec
index 9c0a49b..a1371f4 100644
--- a/mod_wsgi.spec
+++ b/mod_wsgi.spec
@@ -14,7 +14,7 @@
 
 Name:           mod_wsgi
 Version:        4.5.20
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        A WSGI interface for Python web applications in Apache
 Group:          System Environment/Libraries
 License:        ASL 2.0
@@ -22,6 +22,7 @@ URL:            https://modwsgi.readthedocs.io/
 Source0:        https://github.com/GrahamDumpleton/mod_wsgi/archive/%{version}.tar.gz#/mod_wsgi-%{version}.tar.gz
 Source1:        wsgi.conf
 Source2:        wsgi-python3.conf
+Patch1: mod_wsgi-4.5.20-exports.patch
 
 BuildRequires:  httpd-devel, python2-devel
 BuildRequires:  python2-sphinx
@@ -70,6 +71,7 @@ Obsoletes: mod_wsgi < %{version}-%{release}
 
 %prep
 %setup -qn %{name}-%{version}
+%patch1 -p1 -b .exports
 
 %if 0%{?with_python3} > 0
 cp -a . %{py3dir}
@@ -142,6 +144,9 @@ ln -s %{_bindir}/mod_wsgi-express-2 $RPM_BUILD_ROOT%{_bindir}/mod_wsgi-express
 %endif
 
 %changelog
+* Wed Feb  7 2018 Joe Orton <jorton@redhat.com> - 4.5.20-4
+- restrict module DSO symbol exports
+
 * Tue Jan 09 2018 Iryna Shcherbina <ishcherb@redhat.com> - 4.5.20-3
 - Update Python 2 dependency declarations to new packaging standards
   (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)