From: Dmitry V. Levin <ldv@altlinux.org>
Date: Tue, 3 Jun 2014 12:56:42 +0000 (+0000)
Subject: debian: enable security hardening features
X-Git-Tag: v4.9~43
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4182981f6d025d8e753f3da635df5832c0c6d99d;p=strace

debian: enable security hardening features

* debian/rules: Follow the advice in https://wiki.debian.org/Hardening
and enable maximum hardening as for programs that handle untrusted data.
Patch by Markus <waldeck@gmx.de>.
---

diff --git a/debian/rules b/debian/rules
index b997182f..52220fa3 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,7 +2,11 @@
 
 #export DH_VERBOSE=1
 
-CFLAGS = -Wall -g
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+
+CFLAGS += -Wall -g
 
 ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
   CFLAGS += -O0