debian: enable security hardening features

* debian/rules: Follow the advice in https://wiki.debian.org/Hardening
and enable maximum hardening as for programs that handle untrusted data.
Patch by Markus <waldeck@gmx.de>.

diff --git a/debian/rules b/debian/rules
index b997182f4f603919515c1313810393533e50ddc3..52220fa3c72a2ae40a7516975c3e2f84675e8a83 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -2,7 +2,11 @@
 
 #export DH_VERBOSE=1
 
-CFLAGS = -Wall -g
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+
+CFLAGS += -Wall -g
 
 ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
   CFLAGS += -O0