[netcdf] 04/05: Enable all hardening buildflags, except PIE (breaks the build).
Sebastiaan Couwenberg
sebastic at moszumanska.debian.org
Sun Mar 27 11:54:53 UTC 2016
This is an automated email from the git hooks/post-receive script.
sebastic pushed a commit to branch master
in repository netcdf.
commit 9748e8cb47795ddeac866be1f9323ab16a58e9e1
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date: Tue Mar 22 07:42:53 2016 +0100
Enable all hardening buildflags, except PIE (breaks the build).
---
debian/changelog | 1 +
debian/netcdf-bin.lintian-overrides | 2 ++
debian/rules | 4 ++++
3 files changed, 7 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index a058453..42983fb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ netcdf (1:4.4.0-2) UNRELEASED; urgency=medium
* Update Vcs-Git URL to use HTTPS.
* Bump Standards-Version to 3.9.7, no changes.
* Add build dependency on graphviz for dot.
+ * Enable all hardening buildflags, except PIE (breaks the build).
-- Bas Couwenberg <sebastic at debian.org> Fri, 11 Mar 2016 03:00:16 +0100
diff --git a/debian/netcdf-bin.lintian-overrides b/debian/netcdf-bin.lintian-overrides
new file mode 100644
index 0000000..8849b85
--- /dev/null
+++ b/debian/netcdf-bin.lintian-overrides
@@ -0,0 +1,2 @@
+# PIE breaks the build
+netcdf-bin: hardening-no-pie *
diff --git a/debian/rules b/debian/rules
index ce6478c..640063d 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,6 +2,10 @@
#export DH_VERBOSE=1
+# Enable hardening build flags, except:
+# pie: causes build failure
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
HDF5_INCLUDE_PATH=/usr/include/hdf5/serial
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/netcdf.git
More information about the Pkg-grass-devel
mailing list