From 098634aaa52bff406d11f1f6b57bc1e10208cee7 Mon Sep 17 00:00:00 2001 From: Jonathan McDowell Date: Wed, 8 Jun 2016 19:10:05 +0100 Subject: [PATCH] Add all hardening options for Debian build (in particular for bindnow + pie) --- debian/changelog | 1 + debian/rules | 1 + 2 files changed, 2 insertions(+) diff --git a/debian/changelog b/debian/changelog index 4ed5fcb..33c4efd 100644 --- a/debian/changelog +++ b/debian/changelog @@ -5,6 +5,7 @@ onak (0.4.6-1+git) UNRELEASED; urgency=low * Fix up systemd control file to allow non-socket activation. * Update Vcs URLs to use secure variants. * Add onak to Provides: in init script rather than just pgp-keyserver. + * Add all hardening options (in particular for bindnow + pie). -- Jonathan McDowell Sun, 17 Jan 2016 14:14:00 +0000 diff --git a/debian/rules b/debian/rules index ad82309..13bdadc 100755 --- a/debian/rules +++ b/debian/rules @@ -1,5 +1,6 @@ #!/usr/bin/make -f +export DEB_BUILD_MAINT_OPTIONS = hardening=+all DEB_CONFIGURE_EXTRA_FLAGS += --enable-backend=dynamic --runstatedir=/run CFLAGS += -std=gnu99 -- 2.39.2