[med-svn] [trinityrnaseq] 02/03: add hardening

Michael Crusoe misterc-guest at moszumanska.debian.org
Wed Sep 16 21:10:05 UTC 2015


This is an automated email from the git hooks/post-receive script.

misterc-guest pushed a commit to branch master
in repository trinityrnaseq.

commit 7e2bc8b65b281d235680f1db9623844396bcba41
Author: Michael R. Crusoe <michael.crusoe at gmail.com>
Date:   Wed Sep 16 11:01:16 2015 -0700

    add hardening
---
 debian/autoreconf            |  1 +
 debian/control               |  1 +
 debian/copyright             |  1 +
 debian/lintian-overrides     |  2 -
 debian/patches/hardening     | 89 ++++++++++++++++++++++++++++++++++++++++++++
 debian/patches/series        |  1 +
 debian/rules                 |  8 ++--
 debian/trinityrnaseq.install |  1 -
 8 files changed, 96 insertions(+), 8 deletions(-)

diff --git a/debian/autoreconf b/debian/autoreconf
new file mode 100644
index 0000000..97ab876
--- /dev/null
+++ b/debian/autoreconf
@@ -0,0 +1 @@
+Inchworm
diff --git a/debian/control b/debian/control
index 1af3396..637dfd2 100644
--- a/debian/control
+++ b/debian/control
@@ -5,6 +5,7 @@ Section: science
 Priority: optional
 Build-Depends: debhelper (>= 9),
                autotools-dev,
+               dh-autoreconf,
                automake1.11,
                jellyfish (>= 2.1.4),
                libjung-free-java,
diff --git a/debian/copyright b/debian/copyright
index 0615a0f..bebb07c 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -14,6 +14,7 @@ Files-Excluded: trinity-plugins/jellyfish-*.tar.gz
  trinity-plugins/TransDecoder*
  trinity-plugins/collectl
  trinity-plugins/GAL*
+ trinity-plugins/slclust/Makefile.bak
 
 Files: *
 Copyright: © 2011 The Broad Institute, Inc
diff --git a/debian/lintian-overrides b/debian/lintian-overrides
index 6fb9c91..3cb29c6 100644
--- a/debian/lintian-overrides
+++ b/debian/lintian-overrides
@@ -1,4 +1,2 @@
 trinityrnaseq: executable-not-elf-or-script usr/lib/trinityrnaseq/*
 trinityrnaseq: image-file-in-usr-lib usr/lib/trinityrnaseq/sample_data/test_Trinity_Assembly/__indiv_ex_sample_derived/*
-trinityrnaseq: package-contains-timestamped-gzip usr/lib/trinityrnaseq/Analysis/DifferentialExpression/cluster_sample_data/MLF_ESC_NPC.cuff.genes.fpkm.matrix.gz
-trinityrnaseq: package-contains-timestamped-gzip usr/lib/trinityrnaseq/sample_data/*
diff --git a/debian/patches/hardening b/debian/patches/hardening
new file mode 100644
index 0000000..22ac52d
--- /dev/null
+++ b/debian/patches/hardening
@@ -0,0 +1,89 @@
+Description: Use LDFLAGS & CPPFLAGS to enable hardening
+Author: Michael R. Crusoe <crusoe at ucdavis.edu>
+--- trinityrnaseq.orig/Chrysalis/Makefile
++++ trinityrnaseq/Chrysalis/Makefile
+@@ -309,7 +309,7 @@
+ endif
+ 
+ # Linking control (e.g. to link templates):
+-SYS_LINK	=
++SYS_LINK	=  $(LDFLAGS)
+ 
+ # Required libraries:
+ SYS_LIBS	= -lm -pthread
+@@ -381,7 +381,8 @@
+ 		$(SYS_LANG) \
+ 		$(SYS_INCS) \
+ 		$(OMP_OPTIONS) \
+-		$(PTHREAD_OPTIONS)
++		$(PTHREAD_OPTIONS) \
++		$(CPPFLAGS)
+ 
+ LINK_OPTIONS	= \
+ 		$(SYS_DEBUG) \
+--- trinityrnaseq.orig/trinity-plugins/fstrozzi-Fastool-7c3e034f05/Makefile
++++ trinityrnaseq/trinity-plugins/fstrozzi-Fastool-7c3e034f05/Makefile
+@@ -1,8 +1,7 @@
+-CC     = gcc
+-CFLAGS = -O2 -std=c99 -Werror
++CFLAGS += -O2 -std=c99 -Werror
+ 
+ all:kseq.h fastool.c
+-	$(CC) $(CFLAGS) fastool.c -o fastool
++	$(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) fastool.c -o fastool
+ 
+ clean:
+ 	rm -f *.o fastool
+--- trinityrnaseq.orig/trinity-plugins/slclust/src/Makefile
++++ trinityrnaseq/trinity-plugins/slclust/src/Makefile
+@@ -17,11 +17,8 @@
+ # use ${LIBDIR} defined above if appropriate
+ LIBS           = 
+ 
+-# How they are invoked on the compile line (eg: -lspecial)
+-LLIBS          =
+-
+ # Local additions for the CFLAG options
+-LOCAL_CFLAGS   = -Wall 
++LOCAL_CXXFLAGS   = -Wall 
+ #-static
+ 
+ 
+@@ -34,20 +31,11 @@
+ INCLUDE       = ${PROJECT_ROOT}/include
+ 
+ DEBUG         = DEBUG
+-CFLAGS        = -I${INCLUDE} ${LOCAL_CFLAGS}
+-CC            = g++ ${CFLAGS}
++CXXFLAGS        += -I${INCLUDE} ${LOCAL_CXXFLAGS}
+ 
+ MAKEFILE      = Makefile
+ 
+ 
+-# Suffix rules
+-
+-.cc.o:
+-	${CC} -c $<
+-
+-.cpp.o:
+-	${CC} -c $<
+-
+ # Target dependencies
+ 
+ 
+@@ -59,12 +47,13 @@
+ 
+ 
+ clean :
+-	rm -f ${OBJS} core a.out *~ \#* ${EXECUTABLE} ${MAKEFILE}.bak
++	rm -f ${OBJS} core a.out *~ \#* ${EXECUTABLE} ${MAKEFILE}.bak \
++		${BIN}/${EXECUTABLE}
+ 
+ 
+ ${OBJ} : ${MAKEFILE}
+ 
+ ${EXECUTABLE} : ${OBJS}
+-	${CC} ${OBJS} ${LIBS} -o ${EXECUTABLE}	
++	${CXX} ${LDFLAGS} ${OBJS} ${LIBS} -o ${EXECUTABLE}	
+ 	chmod 755 ${EXECUTABLE}
+ 
diff --git a/debian/patches/series b/debian/patches/series
index 7daf669..b7c5342 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -7,3 +7,4 @@ collections15-to-4
 0002-fix_istream_failure_call.patch
 fix-jsquery
 fix_system_paths
+hardening
diff --git a/debian/rules b/debian/rules
index 394c18d..aa5fd46 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,11 +9,10 @@ SOURCE_DIRECTORIES = Inchworm Chrysalis trinity-plugins/*Fastool* trinity-plugin
 BASEDIR=debian/trinityrnaseq/usr/lib/trinityrnaseq
 
 %:
-	dh $@ --parallel --with javahelper
+	dh $@ --parallel --with javahelper,autoreconf
 
 override_dh_auto_configure:
-	for target in ${SOURCE_DIRECTORIES}; do dh_autotools-dev_updateconfig \
-		-O--sourcedirectory=$${target}; dh_auto_configure \
+	for target in ${SOURCE_DIRECTORIES}; do dh_auto_configure \
 		--sourcedirectory=$${target} -- \
 		--prefix=/usr/lib/trinityrnaseq/$${target}; done
 
@@ -22,8 +21,7 @@ override_dh_auto_build:
 		-O--sourcedirectory=$${target}; done
 
 override_dh_auto_clean:
-	for target in ${SOURCE_DIRECTORIES}; do dh_autotools-dev_restoreconfig \
-		-O--sourcedirectory=$${target}; dh_auto_clean \
+	for target in ${SOURCE_DIRECTORIES}; do dh_auto_clean \
 		--sourcedirectory=$${target}; done
 	rm Chrysalis/Makefile_auto
 
diff --git a/debian/trinityrnaseq.install b/debian/trinityrnaseq.install
index d824aa2..8c6270f 100644
--- a/debian/trinityrnaseq.install
+++ b/debian/trinityrnaseq.install
@@ -15,7 +15,6 @@ Chrysalis/GraphFromFasta /usr/lib/trinityrnaseq/Chrysalis/
 Chrysalis/CreateIwormFastaBundle /usr/lib/trinityrnaseq/Chrysalis/
 Chrysalis/Chrysalis /usr/lib/trinityrnaseq/Chrysalis/
 Chrysalis/BreakTransByPairs /usr/lib/trinityrnaseq/Chrysalis/
-Chrysalis/checkLock /usr/lib/trinityrnaseq/Chrysalis/
 Trinity /usr/lib/trinityrnaseq
 PerlLib /usr/lib/trinityrnaseq/
 sample_data /usr/lib/trinityrnaseq/

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/trinityrnaseq.git



More information about the debian-med-commit mailing list