[Pkg-octave-commit] [octave] 01/01: d/rules: Harden the ELF binaries by setting bindnow and PIE linker flags

[Rafael Laboissière]

This is an automated email from the git hooks/post-receive script.

rlaboiss-guest pushed a commit to branch master
in repository octave.

commit 68b98050c08a55728d24d23ae6f5c69954ceee66
Author: Rafael Laboissiere <rafael at laboissiere.net>
Date:   Wed Jan 27 06:58:09 2016 -0200

    d/rules: Harden the ELF binaries by setting bindnow and PIE linker flags
    
    These settings are recommended by Lintian.  The unit tests pass as
    before.  We might revert these changes if any performance issue shows
    up.
---
 debian/rules | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/debian/rules b/debian/rules
index 2b8bc3c..f69ede5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -42,6 +42,11 @@ ifneq ($(wildcard /usr/lib/$(DEB_HOST_MULTIARCH)/hdf5/serial/libhdf5.so),)
 	--with-hdf5-libdir=/usr/lib/$(DEB_HOST_MULTIARCH)/hdf5/serial
 endif
 
+# Hardening setings:
+# - provide "bindnow" linker flag in ELF binaries
+# - set position independent executable (PIE) linker flag
+export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow
+
 %:
 	dh $@ --with autoreconf --parallel
 

-- 
Alioth's /home/groups/pkg-octave/bin/git-commit-notice on /srv/git.debian.org/git/pkg-octave/octave.git