[grass] 03/04: Enable all hardening buildflags, except PIE (causes build failure).

[Sebastiaan Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository grass.

commit 6ef02c2b4c57bea032072385fafd6bdba463b4eb
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Mon Mar 28 14:40:23 2016 +0200

    Enable all hardening buildflags, except PIE (causes build failure).
---
 debian/changelog                    | 1 +
 debian/grass-core.lintian-overrides | 3 +++
 debian/grass-dev.lintian-overrides  | 3 +++
 debian/rules                        | 4 ++++
 4 files changed, 11 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 89f0439..e032e56 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 grass (7.0.3-3) UNRELEASED; urgency=medium
 
   * Update dh_python2 override to call dh_numpy too.
+  * Enable all hardening buildflags, except PIE (causes build failure).
 
  -- Bas Couwenberg <sebastic at debian.org>  Mon, 28 Mar 2016 14:13:24 +0200
 
diff --git a/debian/grass-core.lintian-overrides b/debian/grass-core.lintian-overrides
index 9d0f0d2..74a4bf9 100644
--- a/debian/grass-core.lintian-overrides
+++ b/debian/grass-core.lintian-overrides
@@ -83,3 +83,6 @@ grass-core: hardening-no-fortify-functions usr/lib/grass*/lib/libgrass_segment.*
 # distributed.
 grass-core: extra-license-file usr/share/doc/grass-core/COPYING
 
+# PIE breaks the build
+grass-core: hardening-no-pie *
+
diff --git a/debian/grass-dev.lintian-overrides b/debian/grass-dev.lintian-overrides
new file mode 100644
index 0000000..142ba74
--- /dev/null
+++ b/debian/grass-dev.lintian-overrides
@@ -0,0 +1,3 @@
+# PIE breaks the build
+grass-dev: hardening-no-pie *
+
diff --git a/debian/rules b/debian/rules
index 579ed12..a27ecf7 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,6 +3,10 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
+# Enable hardening build flags, except:
+#  pie: causes build failure
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
 VERSION=$(shell echo `head -2 $(CURDIR)/include/VERSION` | sed -e 's/ //')
 ABI=$(shell echo `head -3 $(CURDIR)/include/VERSION` | sed -e 's/ //g' -e 's/RC/-/')
 BASE_NAME=grass$(VERSION)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/grass.git