[zoo-project] 03/04: Enable PIE hardening buildflags, except on Ubuntu where it's still problematic.

[Bas Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository zoo-project.

commit 103e3cb7e8f0cab00963e9c7b22fc8a3018d9b41
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Mon Jun 26 22:07:54 2017 +0200

    Enable PIE hardening buildflags, except on Ubuntu where it's still problematic.
---
 debian/rules | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 92d6d9e..85d832c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,7 +2,14 @@
 # -*- makefile -*-
 
 # Enable hardening build flags
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
+
+# Disable PIE on Ubuntu where it's still problematic
+VENDOR_DERIVES_FROM_UBUNTU ?= $(shell dpkg-vendor --derives-from Ubuntu && echo yes)
+
+ifeq ($(VENDOR_DERIVES_FROM_UBUNTU),yes)
+	export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+endif
 
 UPSTREAM_VERSION=$(shell dpkg-parsechangelog | sed -ne 's/^Version: \(.*\)-.*/\1/p' | sed -e 's/\+.*//; s/^[0-9]://')
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/zoo-project.git