[gdal] 02/03: Enable all hardening buildflags, disable pie which breaks the Python bindings.

[Sebastiaan Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository gdal.

commit 93ed4ccf51fe97e8a23d1718efad50f662d08faf
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Mon Mar 14 21:12:16 2016 +0100

    Enable all hardening buildflags, disable pie which breaks the Python bindings.
---
 debian/changelog                  | 2 ++
 debian/gdal-bin.lintian-overrides | 4 ++++
 debian/rules                      | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index cb007bb..f9e32c3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,8 @@ gdal (2.0.2+dfsg-4) UNRELEASED; urgency=medium
 
   * Disable JasPer support, will be removed from stretch.
     (closes: #818198)
+  * Enable all hardening buildflags, disable pie
+    which breaks the Python bindings.
 
  -- Bas Couwenberg <sebastic at debian.org>  Wed, 09 Mar 2016 21:08:01 +0100
 
diff --git a/debian/gdal-bin.lintian-overrides b/debian/gdal-bin.lintian-overrides
index 62fada7..d3eb9bf 100644
--- a/debian/gdal-bin.lintian-overrides
+++ b/debian/gdal-bin.lintian-overrides
@@ -6,3 +6,7 @@ gdal-bin: binary-without-manpage
 # Breaks for python-gdal vs gdal-bin due to gdal_retile.1 collision
 # in pre-1.10 versions distributed in experimental. Just for safety.
 gdal-bin: package-relation-with-self breaks: gdal-bin (<< 1.10.0-0~)
+
+# PIE breaks the Python bindings
+gdal-bin: hardening-no-pie *
+
diff --git a/debian/rules b/debian/rules
index 9bf4ecc..9975cc0 100755
--- a/debian/rules
+++ b/debian/rules
@@ -8,6 +8,9 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
+# Enable hardening build flags
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
 # Remove -Werror=format-security, causes build failure on ogrsxfdatasource.cpp
 CFLAGS   = $(shell dpkg-buildflags --get CFLAGS)
 CXXFLAGS = $(shell dpkg-buildflags --get CXXFLAGS)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/gdal.git