r54606 - in /packages/unstable/libcanberra/debian: changelog rules

[smcv at users.alioth.debian.org]

Author: smcv
Date: Mon Oct 30 09:44:53 2017
New Revision: 54606

URL: http://svn.debian.org/wsvn/pkg-gnome/?sc=1&rev=54606
Log:
Enable PIE hardening

Modified:
    packages/unstable/libcanberra/debian/changelog
    packages/unstable/libcanberra/debian/rules

Modified: packages/unstable/libcanberra/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-gnome/packages/unstable/libcanberra/debian/changelog?rev=54606&op=diff
==============================================================================
--- packages/unstable/libcanberra/debian/changelog	[utf-8] (original)
+++ packages/unstable/libcanberra/debian/changelog	[utf-8] Mon Oct 30 09:44:53 2017
@@ -12,6 +12,7 @@
     - Don't use dh-autoreconf explicitly, it is now the default
   * Standards-Version: 4.1.1 (no further changes required)
   * Give all packages distinct short descriptions
+  * Enable PIE hardening
 
  -- Simon McVittie <smcv at debian.org>  Thu, 12 Oct 2017 01:04:41 +0100
 

Modified: packages/unstable/libcanberra/debian/rules
URL: http://svn.debian.org/wsvn/pkg-gnome/packages/unstable/libcanberra/debian/rules?rev=54606&op=diff
==============================================================================
--- packages/unstable/libcanberra/debian/rules	[utf-8] (original)
+++ packages/unstable/libcanberra/debian/rules	[utf-8] Mon Oct 30 09:44:53 2017
@@ -2,6 +2,7 @@
 
 # Ensure at build time that the library has no dependencies on undefined
 # symbols, and speed up loading.
+DEB_BUILD_MAINT_OPTIONS = hardening=+pie,+bindnow
 DEB_LDFLAGS_MAINT_APPEND=-Wl,-z,defs -Wl,-O1 -Wl,--as-needed
 include /usr/share/dpkg/default.mk