[rpms/busybox] rawhide: spec: add -mbranch-protection=standard

[Bill Roberts <bill.roberts@arm.com>]

            A new commit has been pushed.

            Repo   : rpms/busybox
            Branch : rawhide
            Commit : a8a537b00ddaccb9615122eb1b15f8b334457993
            Author : Bill Roberts <bill.roberts@arm.com>
            Date   : 2026-08-06T14:56:12-05:00
            Stats  : +4/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/busybox/c/a8a537b00ddaccb9615122eb1b15f8b334457993?branch=rawhide

            Log:
            spec: add -mbranch-protection=standard

busybox doesn't use the default build flags, so for aarch64 builds add
in BTI and PAC support.

Note that it will get turned off becuase musl C doesn't support PAC and
BTI yet, but this prepares busybox for that support.

Signed-off-by: Bill Roberts <bill.roberts@arm.com>

---
diff --git a/busybox.spec b/busybox.spec
index 3938c06..d36bf7e 100644
--- a/busybox.spec
+++ b/busybox.spec
@@ -52,6 +52,10 @@
 %global hldflags %{_hardening_ldflags} -Wl,-z,relro,-z,now
 %endif
 
+%ifarch aarch64
+%global hcflags %{_hardening_cflags} -mbranch-protection=standard
+%endif
+
 Name:		busybox
 Version:	1.37.0
 Release:	8%{?dist}