[routino] 02/03: Enable all hardening buildflags.

Sebastiaan Couwenberg sebastic at moszumanska.debian.org
Fri Mar 25 19:07:26 UTC 2016


This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository routino.

commit 094b852b3fdd897e429903b35e6d8ec4bac7c0ce
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Fri Mar 25 18:51:11 2016 +0100

    Enable all hardening buildflags.
---
 debian/changelog         | 1 +
 debian/patches/hardening | 6 +++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 01e3fa4..5834494 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,7 @@ routino (3.1.1-2) UNRELEASED; urgency=medium
 
   * Add version requirement for routino-common dependencies.
     (closes: #819254)
+  * Enable all hardening buildflags.
 
  -- Bas Couwenberg <sebastic at debian.org>  Fri, 25 Mar 2016 18:29:35 +0100
 
diff --git a/debian/patches/hardening b/debian/patches/hardening
index 7d2f45d..a8c29cf 100644
--- a/debian/patches/hardening
+++ b/debian/patches/hardening
@@ -10,6 +10,6 @@ Forwarded: not-needed
  endif
 +
 +# Hardening flags
-+CFLAGS+=-g -fstack-protector-strong -Wformat -Werror=format-security
-+CFLAGS+=-D_FORTIFY_SOURCE=2
-+LDFLAGS+=-Wl,-z,relro
++CFLAGS+=-g -fPIE -fstack-protector-strong -Wformat -Werror=format-security
++CFLAGS+=-Wdate-time -D_FORTIFY_SOURCE=2
++LDFLAGS+=-fPIE -pie -Wl,-z,relro -Wl,-z,now

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/routino.git



More information about the Pkg-grass-devel mailing list