Add all hardening options for Debian build (in particular for bindnow + pie)

[onak.git] / debian / rules

diff --git a/debian/rules b/debian/rules
index baac1267c1a5c82c021db6a3d2992d1221f75ef4..13bdadca02f7254cca2ab1d9684f9dece99cfbf1 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,8 +1,16 @@
 #!/usr/bin/make -f
 
-include /usr/share/cdbs/1/rules/debhelper.mk
-include /usr/share/cdbs/1/class/autotools.mk
-
-DEB_CONFIGURE_EXTRA_FLAGS += --enable-backend=dynamic
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DEB_CONFIGURE_EXTRA_FLAGS += --enable-backend=dynamic --runstatedir=/run
 
 CFLAGS += -std=gnu99
+
+%:
+       dh "$@" --with autoreconf,systemd
+
+override_dh_installinit:
+       dh_installinit --no-start
+
+override_dh_systemd_enable:
+       dh_systemd_enable --no-enable debian/onak.service
+       dh_systemd_enable --no-enable debian/onak.socket