Add all hardening options for Debian build (in particular for bindnow + pie)

diff --git a/debian/changelog b/debian/changelog
index 4ed5fcb1a7fdda16744ed790ac05a8b96a0edf14..33c4efdf40055539dda1f1508c103be1c6b45370 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ onak (0.4.6-1+git) UNRELEASED; urgency=low
   * Fix up systemd control file to allow non-socket activation.
   * Update Vcs URLs to use secure variants.
   * Add onak to Provides: in init script rather than just pgp-keyserver.
+  * Add all hardening options (in particular for bindnow + pie).
 
  -- Jonathan McDowell <noodles@earth.li>  Sun, 17 Jan 2016 14:14:00 +0000
 

diff --git a/debian/rules b/debian/rules
index ad82309025191867d7107b861d674ddb4ef6abb0..13bdadca02f7254cca2ab1d9684f9dece99cfbf1 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 DEB_CONFIGURE_EXTRA_FLAGS += --enable-backend=dynamic --runstatedir=/run
 
 CFLAGS += -std=gnu99