[SCM] Debian packaging for the 2.0 Apache Shibboleth SP branch, master, updated. debian/2.4.3+dfsg-4-2-g1c681e9

Russ Allbery rra at debian.org
Fri Feb 3 00:32:22 UTC 2012


The following commit has been merged in the master branch:
commit 1c681e9d756d002d8d55677f3ee53e10f71e6197
Author: Russ Allbery <rra at debian.org>
Date:   Thu Feb 2 16:32:06 2012 -0800

    Add PIE to the hardening flags for the shibd binary

diff --git a/debian/changelog b/debian/changelog
index 9dfb066..19668d4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+shibboleth-sp2 (2.4.3+dfsg-5) UNRELEASED; urgency=low
+
+  * Add PIE to the hardening flags for the shibd binary.
+
+ -- Russ Allbery <rra at debian.org>  Thu, 02 Feb 2012 16:32:00 -0800
+
 shibboleth-sp2 (2.4.3+dfsg-4) unstable; urgency=low
 
   * Update to debhelper compatibility level V9.
diff --git a/debian/rules b/debian/rules
index 49a050b..792e185 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 
 # Enable compiler hardening flags.
-export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow
+export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow,+pie
 
 # Add --as-needed to drop a few unnecessary dependencies.
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed

-- 
Debian packaging for the 2.0 Apache Shibboleth SP



More information about the Pkg-shibboleth-devel mailing list