!65 Enable fPIE and Remove rpath

From: @zhangxianting 
Reviewed-by: @robertxw 
Signed-off-by: @robertxw

nftables.spec

@@ -1,6 +1,6 @@
 Name:           nftables
 Version:        0.9.6
-Release:        5
+Release:        6
 Epoch:          1
 Summary:        A subsystem of the Linux kernel processing network data
 License:        GPLv2
@@ -22,7 +22,7 @@ Patch6009:      backport-parser_json-fix-device-parsing-in-netdev-family.patch
 Patch6010:      backport-src-Don-t-parse-string-as-verdict-in-map.patch
 
 BuildRequires:  gcc flex bison libmnl-devel gmp-devel readline-devel libnftnl-devel docbook2X systemd
-BuildRequires:  iptables-devel jansson-devel python3-devel
+BuildRequires:  iptables-devel jansson-devel python3-devel chrpath
 Requires:       %{name}-help
 
 %description
@@ -51,7 +51,7 @@ The nftables python module providing an interface to libnftables via ctypes.
 
 %build
 %configure --disable-silent-rules --with-xtables --with-json \
-        --enable-python --with-python-bin=%{__python3}
+        --enable-python --with-python-bin=%{__python3} CFLAGS="%{optflags} -fPIE -pie"
 %make_build
 
 %check
@@ -59,6 +59,8 @@ make check
 
 %install
 %make_install
+chrpath -d %{buildroot}%{_sbindir}/nft
+
 %delete_la
 
 chmod 644 $RPM_BUILD_ROOT/%{_mandir}/man8/nft*
@@ -110,6 +112,12 @@ install -d $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
 %{python3_sitelib}/nftables/
 
 %changelog
+* Mon Nov 13 2023 zhangxianting <zhangxianting@uniontech.com> - 1:0.9.6-6
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:enable fPIE and remove rpath
+
 * Thu Dec 15 2022 huangyu <huangyu106@huawei.com> - 1:0.9.6-5
 - Type:bugfix
 - CVE:NA