[pywps] 04/06: Disable PIE on Ubuntu where it's still problematic.

[Bas Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository pywps.

commit eeb084133c224efb25ba644943e3b8326f12a315
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Mon Jun 26 12:02:52 2017 +0200

    Disable PIE on Ubuntu where it's still problematic.
---
 debian/changelog | 1 +
 debian/rules     | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 7347080..ea6e75f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ pywps (4.0.0-4) UNRELEASED; urgency=medium
   * Bump Standards-Version to 4.0.0, no changes.
   * Add autopkgtest to test installability.
   * Enable PIE hardening buildflags.
+  * Disable PIE on Ubuntu where it's still problematic.
 
  -- Bas Couwenberg <sebastic at debian.org>  Mon, 26 Jun 2017 12:00:46 +0200
 
diff --git a/debian/rules b/debian/rules
index 6219374..0c14b42 100755
--- a/debian/rules
+++ b/debian/rules
@@ -12,6 +12,13 @@
 # Enable hardening build flags
 export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
+# Disable PIE on Ubuntu where it's still problematic
+VENDOR_DERIVES_FROM_UBUNTU ?= $(shell dpkg-vendor --derives-from Ubuntu && echo yes)
+
+ifeq ($(VENDOR_DERIVES_FROM_UBUNTU),yes)
+	export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+endif
+
 %:
 	dh $@ --with apache2,python2,sphinxdoc --buildsystem=pybuild --parallel
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/pywps.git