[Pkg-octave-commit] [octave-pkg-dev] 01/01: Use the appropriate way of activating hardening flags

[Rafael Laboissière]

This is an automated email from the git hooks/post-receive script.

rlaboiss-guest pushed a commit to branch master
in repository octave-pkg-dev.

commit b9e9583fef0569cf98f67ba86716891cd40b4625
Author: Rafael Laboissiere <rafael at laboissiere.net>
Date:   Tue Feb 2 09:50:58 2016 -0200

    Use the appropriate way of activating hardening flags
    
    Gbp-Dch: Ignore
---
 octave-pkg.mk | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/octave-pkg.mk b/octave-pkg.mk
index 49351e9..c40fee3 100644
--- a/octave-pkg.mk
+++ b/octave-pkg.mk
@@ -61,9 +61,12 @@ export OCTAVE_HISTFILE=/dev/null
 
 # Export buildflags to the environment, they will be picked up by mkoctfile.
 # Link with --as-needed since that drastically reduces the number of linked
-# libraries.  Also, link with "-z now" for telling the dynamic linker
+# libraries.
+DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+#  Also, link with the "bindnow" flag for telling the dynamic linker
 # to resolve all symbols when the .oct file is loaded (hardening issues).
-DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed -Wl,-z,now
+DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow
+
 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk
 # Oct-files ldflags are taken from the following variable

-- 
Alioth's /home/groups/pkg-octave/bin/git-commit-notice on /srv/git.debian.org/git/pkg-octave/octave-pkg-dev.git