[mapnik] 01/03: Enable all hardening buildflags, except pie (causes python-mapnik build failures).

Sebastiaan Couwenberg sebastic at moszumanska.debian.org
Fri Mar 18 21:07:14 UTC 2016


This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository mapnik.

commit 53b5b4a5745f04fcf2a48e551f0cf9b1116b8a04
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Fri Mar 18 18:12:42 2016 +0100

    Enable all hardening buildflags, except pie (causes python-mapnik build failures).
---
 debian/changelog                      | 2 ++
 debian/mapnik-utils.lintian-overrides | 3 +++
 debian/rules                          | 4 ++++
 3 files changed, 9 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 9c924f3..1776988 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -15,6 +15,8 @@ mapnik (3.0.10+ds-1) UNRELEASED; urgency=medium
   * Drop 2001_ftemplate-depth.patch, applied upstream.
   * Add --shape-index option to shapeindex manpage.
   * Add (build) dependency on libmapbox-variant-dev.
+  * Enable all hardening buildflags, except pie
+    (causes python-mapnik build failures).
 
  -- Bas Couwenberg <sebastic at debian.org>  Fri, 26 Feb 2016 19:48:46 +0100
 
diff --git a/debian/mapnik-utils.lintian-overrides b/debian/mapnik-utils.lintian-overrides
new file mode 100644
index 0000000..b3cd357
--- /dev/null
+++ b/debian/mapnik-utils.lintian-overrides
@@ -0,0 +1,3 @@
+# PIE breaks the Python bindings 
+mapnik-utils: hardening-no-pie *
+
diff --git a/debian/rules b/debian/rules
index f63cb3b..bcd1be9 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,6 +4,10 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
+# Enable hardening build flags, except:
+#  pie: causes python-mapnik build failure
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
 NJOBS := -j1
 ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
 NJOBS := -j$(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/mapnik.git



More information about the Pkg-grass-devel mailing list