[Debian-ha-commits] [cluster-glue] 54/73: Updated hardening implementation

[Richard Winters]

This is an automated email from the git hooks/post-receive script.

devrik-guest pushed a commit to branch master
in repository cluster-glue.

commit 2ed21a774e3c2db6cf70acd0380d9f40abbef796
Author: Richard B Winters <rik at mmogp.com>
Date:   Thu Apr 16 14:00:49 2015 -0400

    Updated hardening implementation
    
    Change-Id: I7fd29572a3a85bf55fba1a2c726ed54715026df4
    Signed-off-by: Richard B Winters <rik at mmogp.com>
---
 debian/rules | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/debian/rules b/debian/rules
index 40c7258..8eb7455 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,8 +9,11 @@ export DH_OPTIONS
 DEB_HOST_GNU_TYPE   ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 
-# enable hardening 
-export DEB_BUILD_HARDENING=1
+# Hardening, see FEATURE AREAS in dpkg-buildflags(1)
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# Ensure that we link against all needed libraries (cf. Policy 10.2)
+export DEB_LDFLAGS_MAINT_APPEND=-Wl,-z,defs
 
 DTMP:=$(CURDIR)/debian/tmp
 RELEASE := $(shell dpkg-parsechangelog | awk '/^Version: / { print $$2 }')

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-ha/cluster-glue.git