[netcdf-cxx] 04/05: Enable all hardening buildflags.

[Sebastiaan Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository netcdf-cxx.

commit 808b5da3156f9b086e93758124b810b43040be14
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Tue Mar 22 07:30:31 2016 +0100

    Enable all hardening buildflags.
---
 debian/changelog | 1 +
 debian/rules     | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 240dbf5..6f8d8f6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ netcdf-cxx (4.2.1-4) UNRELEASED; urgency=medium
   * Update Vcs-Git URL to use HTTPS.
   * Bump Standards-Version to 3.9.7, no changes.
   * Add build dependency on graphviz for dot.
+  * Enable all hardening buildflags.
 
  -- Bas Couwenberg <sebastic at debian.org>  Fri, 11 Mar 2016 02:56:47 +0100
 
diff --git a/debian/rules b/debian/rules
index bfeb71f..f1f3e6e 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,6 +2,10 @@
 
 #export DH_VERBOSE=1
 
+# Enable hardening build flags, except:
+#  pie: causes build failure
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
 UPSTREAM_VERSION=$(shell dpkg-parsechangelog | sed -ne 's/^Version: \(.*\)-.*/\1/p' | sed -e 's/\+.*//; s/^[0-9]://')
 
 # Verbose test output

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/netcdf-cxx.git