[med-svn] [seqan] 01/01: Add debian hardening flags which cmake will use

Kevin Murray daube-guest at moszumanska.debian.org
Mon Sep 28 00:02:09 UTC 2015


This is an automated email from the git hooks/post-receive script.

daube-guest pushed a commit to branch master
in repository seqan.

commit dcd348102b3c53682e93c624b7f8a9bed610a0cd
Author: Kevin Murray <spam at kdmurray.id.au>
Date:   Mon Sep 28 10:01:07 2015 +1000

    Add debian hardening flags which cmake will use
---
 debian/rules | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 3f7789c..4520c6c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,8 +3,15 @@
 # Uncomment this to turn on verbose mode.
 export DH_VERBOSE=1
 
+# import hardening, adding CPPFLAGS to CFLAGS, in case dh doesn't
+# See https://wiki.debian.org/Hardening#Notes_for_packages_using_CMake
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+CFLAGS+=$(CPPFLAGS)
+CXXFLAGS+=$(CPPFLAGS)
+
 # Droping -fstack-protector flag helps **drastically** reducing memory consumption when building the package!!!!
-# export CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS | sed 's/-fstack-protector *//')  ## this simply tiggers #759978
+# export CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS | sed 's/-fstack-protector *//')  ## don't do this, it simply triggers #759978
 # export DEB_BUILD_MAINT_OPTIONS = hardening=-stackprotector
 # alternatively: export DEB_CXXFLAGS_STRIP='-fstack-protector'
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/seqan.git



More information about the debian-med-commit mailing list