Bug#1032018: accounts-daemon: enable full hardening flags

[Christian Göttsche]

Source: accountsservice
Version: 22.08.8-6
Tags: security,patch

Dear Maintaner,

please enable full hardening flags for accounts-daemon; in particular
currently the link feature BINDNOW[1] is missing.
As accounts-daemon is a long running daemon any potential startup
costs are negligible.


[1]: https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29


--- rules.bak   2023-02-26 17:22:41.371721516 +0100
+++ rules       2023-02-26 17:22:52.163547706 +0100
@@ -1,6 +1,7 @@
#!/usr/bin/make -f
# -*- makefile -*-

+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed

binaries := $(shell dh_listpackages)