From: Jonathan McDowell <noodles@earth.li>
Date: Wed, 8 Jun 2016 18:10:05 +0000 (+0100)
Subject: Add all hardening options for Debian build (in particular for bindnow + pie)
X-Git-Tag: onak-0.5.0~18
X-Git-Url: https://the.earth.li/gitweb/?a=commitdiff_plain;h=098634aaa52bff406d11f1f6b57bc1e10208cee7;p=onak.git

Add all hardening options for Debian build (in particular for bindnow + pie)
---

diff --git a/debian/changelog b/debian/changelog
index 4ed5fcb..33c4efd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ onak (0.4.6-1+git) UNRELEASED; urgency=low
   * Fix up systemd control file to allow non-socket activation.
   * Update Vcs URLs to use secure variants.
   * Add onak to Provides: in init script rather than just pgp-keyserver.
+  * Add all hardening options (in particular for bindnow + pie).
 
  -- Jonathan McDowell <noodles@earth.li>  Sun, 17 Jan 2016 14:14:00 +0000
 
diff --git a/debian/rules b/debian/rules
index ad82309..13bdadc 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 DEB_CONFIGURE_EXTRA_FLAGS += --enable-backend=dynamic --runstatedir=/run
 
 CFLAGS += -std=gnu99