[Debian-ha-commits] [cluster-glue] 54/73: Updated hardening implementation
Richard Winters
devrik-guest at moszumanska.debian.org
Mon Apr 20 01:41:58 UTC 2015
This is an automated email from the git hooks/post-receive script.
devrik-guest pushed a commit to branch master
in repository cluster-glue.
commit 8131ec2ee47fa72c17c297927c9a308bd6d20029
Author: Richard B Winters <rik at mmogp.com>
Date: Thu Apr 16 14:00:49 2015 -0400
Updated hardening implementation
Change-Id: I7fd29572a3a85bf55fba1a2c726ed54715026df4
Signed-off-by: Richard B Winters <rik at mmogp.com>
---
debian/rules | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/debian/rules b/debian/rules
index 40c7258..8eb7455 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,8 +9,11 @@ export DH_OPTIONS
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
-# enable hardening
-export DEB_BUILD_HARDENING=1
+# Hardening, see FEATURE AREAS in dpkg-buildflags(1)
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# Ensure that we link against all needed libraries (cf. Policy 10.2)
+export DEB_LDFLAGS_MAINT_APPEND=-Wl,-z,defs
DTMP:=$(CURDIR)/debian/tmp
RELEASE := $(shell dpkg-parsechangelog | awk '/^Version: / { print $$2 }')
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-ha/cluster-glue.git
More information about the Debian-HA-Commits
mailing list