[grass] 03/04: Enable all hardening buildflags, except PIE (causes build failure).
Sebastiaan Couwenberg
sebastic at moszumanska.debian.org
Mon Mar 28 14:09:33 UTC 2016
This is an automated email from the git hooks/post-receive script.
sebastic pushed a commit to branch master
in repository grass.
commit 6ef02c2b4c57bea032072385fafd6bdba463b4eb
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date: Mon Mar 28 14:40:23 2016 +0200
Enable all hardening buildflags, except PIE (causes build failure).
---
debian/changelog | 1 +
debian/grass-core.lintian-overrides | 3 +++
debian/grass-dev.lintian-overrides | 3 +++
debian/rules | 4 ++++
4 files changed, 11 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index 89f0439..e032e56 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
grass (7.0.3-3) UNRELEASED; urgency=medium
* Update dh_python2 override to call dh_numpy too.
+ * Enable all hardening buildflags, except PIE (causes build failure).
-- Bas Couwenberg <sebastic at debian.org> Mon, 28 Mar 2016 14:13:24 +0200
diff --git a/debian/grass-core.lintian-overrides b/debian/grass-core.lintian-overrides
index 9d0f0d2..74a4bf9 100644
--- a/debian/grass-core.lintian-overrides
+++ b/debian/grass-core.lintian-overrides
@@ -83,3 +83,6 @@ grass-core: hardening-no-fortify-functions usr/lib/grass*/lib/libgrass_segment.*
# distributed.
grass-core: extra-license-file usr/share/doc/grass-core/COPYING
+# PIE breaks the build
+grass-core: hardening-no-pie *
+
diff --git a/debian/grass-dev.lintian-overrides b/debian/grass-dev.lintian-overrides
new file mode 100644
index 0000000..142ba74
--- /dev/null
+++ b/debian/grass-dev.lintian-overrides
@@ -0,0 +1,3 @@
+# PIE breaks the build
+grass-dev: hardening-no-pie *
+
diff --git a/debian/rules b/debian/rules
index 579ed12..a27ecf7 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,6 +3,10 @@
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
+# Enable hardening build flags, except:
+# pie: causes build failure
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+
VERSION=$(shell echo `head -2 $(CURDIR)/include/VERSION` | sed -e 's/ //')
ABI=$(shell echo `head -3 $(CURDIR)/include/VERSION` | sed -e 's/ //g' -e 's/RC/-/')
BASE_NAME=grass$(VERSION)
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/grass.git
More information about the Pkg-grass-devel
mailing list