[med-svn] [seqan] 01/01: Add debian hardening flags which cmake will use
Kevin Murray
daube-guest at moszumanska.debian.org
Mon Sep 28 00:02:09 UTC 2015
This is an automated email from the git hooks/post-receive script.
daube-guest pushed a commit to branch master
in repository seqan.
commit dcd348102b3c53682e93c624b7f8a9bed610a0cd
Author: Kevin Murray <spam at kdmurray.id.au>
Date: Mon Sep 28 10:01:07 2015 +1000
Add debian hardening flags which cmake will use
---
debian/rules | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/debian/rules b/debian/rules
index 3f7789c..4520c6c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,8 +3,15 @@
# Uncomment this to turn on verbose mode.
export DH_VERBOSE=1
+# import hardening, adding CPPFLAGS to CFLAGS, in case dh doesn't
+# See https://wiki.debian.org/Hardening#Notes_for_packages_using_CMake
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+CFLAGS+=$(CPPFLAGS)
+CXXFLAGS+=$(CPPFLAGS)
+
# Droping -fstack-protector flag helps **drastically** reducing memory consumption when building the package!!!!
-# export CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS | sed 's/-fstack-protector *//') ## this simply tiggers #759978
+# export CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS | sed 's/-fstack-protector *//') ## don't do this, it simply triggers #759978
# export DEB_BUILD_MAINT_OPTIONS = hardening=-stackprotector
# alternatively: export DEB_CXXFLAGS_STRIP='-fstack-protector'
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/seqan.git
More information about the debian-med-commit
mailing list