[routino] 02/03: Enable all hardening buildflags.
Sebastiaan Couwenberg
sebastic at moszumanska.debian.org
Fri Mar 25 19:07:26 UTC 2016
This is an automated email from the git hooks/post-receive script.
sebastic pushed a commit to branch master
in repository routino.
commit 094b852b3fdd897e429903b35e6d8ec4bac7c0ce
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date: Fri Mar 25 18:51:11 2016 +0100
Enable all hardening buildflags.
---
debian/changelog | 1 +
debian/patches/hardening | 6 +++---
2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 01e3fa4..5834494 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,7 @@ routino (3.1.1-2) UNRELEASED; urgency=medium
* Add version requirement for routino-common dependencies.
(closes: #819254)
+ * Enable all hardening buildflags.
-- Bas Couwenberg <sebastic at debian.org> Fri, 25 Mar 2016 18:29:35 +0100
diff --git a/debian/patches/hardening b/debian/patches/hardening
index 7d2f45d..a8c29cf 100644
--- a/debian/patches/hardening
+++ b/debian/patches/hardening
@@ -10,6 +10,6 @@ Forwarded: not-needed
endif
+
+# Hardening flags
-+CFLAGS+=-g -fstack-protector-strong -Wformat -Werror=format-security
-+CFLAGS+=-D_FORTIFY_SOURCE=2
-+LDFLAGS+=-Wl,-z,relro
++CFLAGS+=-g -fPIE -fstack-protector-strong -Wformat -Werror=format-security
++CFLAGS+=-Wdate-time -D_FORTIFY_SOURCE=2
++LDFLAGS+=-fPIE -pie -Wl,-z,relro -Wl,-z,now
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/routino.git
More information about the Pkg-grass-devel
mailing list