[qrouter] 01/01: Found one solution to the hardening problem

[Ruben Undheim]

This is an automated email from the git hooks/post-receive script.

rubund-guest pushed a commit to branch master
in repository qrouter.

commit f0fd4924a1ca795e5c211475b2aa0bf0d225e970
Author: Ruben Undheim <ruben.undheim at gmail.com>
Date:   Fri Feb 20 19:36:51 2015 +0100

    Found one solution to the hardening problem
---
 debian/rules | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index c4f8382..daf20c6 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,7 +3,10 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
-export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+# The build script crashes if "-pie" is given to the build command. Therefore
+# enabling hardening with LDFLAGS_MAINT_APPEND (together with the --as-needed
+# option):
+export DEB_LDFLAGS_MAINT_APPEND = -fPIE -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
 #export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
 %:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-science/packages/qrouter.git