[Git][debian-gis-team/routino][master] 2 commits: Use dpkg-buildflags in Makefile.conf to get hardening flags.

[Bas Couwenberg (@sebastic)]

Bas Couwenberg pushed to branch master at Debian GIS Project / routino


Commits:
749b48e8 by Bas Couwenberg at 2025-03-07T06:12:42+01:00
Use dpkg-buildflags in Makefile.conf to get hardening flags.

- - - - -
6cce3977 by Bas Couwenberg at 2025-03-07T06:13:01+01:00
Set distribution to experimental.

- - - - -


2 changed files:

- debian/changelog
- debian/patches/hardening


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,10 @@
+routino (3.4.1-3~exp1) experimental; urgency=medium
+
+  * Use dpkg-buildflags in Makefile.conf to get hardening flags.
+    (closes: #1099720)
+
+ -- Bas Couwenberg <sebastic at debian.org>  Fri, 07 Mar 2025 06:12:45 +0100
+
 routino (3.4.1-2) unstable; urgency=medium
 
   * Use execute_{before,after} instead of override in rules file.


=====================================
debian/patches/hardening
=====================================
@@ -10,6 +10,6 @@ Forwarded: not-needed
  endif
 +
 +# Hardening flags
-+CFLAGS+=-g -fPIE -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection
-+CFLAGS+=-Wdate-time -D_FORTIFY_SOURCE=2
-+LDFLAGS+=-fPIE -pie -Wl,-z,relro -Wl,-z,now
++CFLAGS+=$(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get CFLAGS)
++CFLAGS+=$(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get CPPFLAGS)
++LDFLAGS+=$(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get LDFLAGS)



View it on GitLab: https://salsa.debian.org/debian-gis-team/routino/-/compare/035244412e6debe63ff4351386e844e65a0976db...6cce3977e23dfa7b944dde8d8d14223df1a917b7

-- 
View it on GitLab: https://salsa.debian.org/debian-gis-team/routino/-/compare/035244412e6debe63ff4351386e844e65a0976db...6cce3977e23dfa7b944dde8d8d14223df1a917b7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20250307/59d419ad/attachment-0001.htm>