[pgrouting] 10/11: Enable all hardening buildflags.

Sebastiaan Couwenberg sebastic at moszumanska.debian.org
Fri Apr 8 01:18:44 UTC 2016


This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository pgrouting.

commit 51b21397f871ae46a405828f8f54b2608c91519e
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Fri Apr 8 01:59:43 2016 +0200

    Enable all hardening buildflags.
---
 debian/changelog                                  | 1 +
 debian/postgresql-9.5-pgrouting.lintian-overrides | 4 ++++
 debian/rules                                      | 7 +++++++
 3 files changed, 12 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index c4f8f38..4cb3821 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,6 +10,7 @@ pgrouting (2.2.0-1) UNRELEASED; urgency=medium
   * Simplify file glob patterns in doc-base.
   * Enable verbose make output.
   * Add patch to fix spelling errors.
+  * Enable all hardening buildflags.
 
  -- Bas Couwenberg <sebastic at debian.org>  Thu, 07 Apr 2016 16:20:56 +0200
 
diff --git a/debian/postgresql-9.5-pgrouting.lintian-overrides b/debian/postgresql-9.5-pgrouting.lintian-overrides
new file mode 100644
index 0000000..424545f
--- /dev/null
+++ b/debian/postgresql-9.5-pgrouting.lintian-overrides
@@ -0,0 +1,4 @@
+# Build uses -D_FORTIFY_SOURCE=2, but hardening-check reports:
+#  Fortify Source functions: no, only unprotected functions found!
+postgresql-9.5-pgrouting: hardening-no-fortify-functions *
+
diff --git a/debian/rules b/debian/rules
index 0d81c32..a674c14 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,6 +3,13 @@
 
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
+
+# Enable hardening build flags
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
+
+CFLAGS   += $(CPPFLAGS)
+CXXFLAGS += $(CPPFLAGS)
+
 include /usr/share/postgresql-common/pgxs_debian_control.mk
 
 %:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/pgrouting.git



More information about the Pkg-grass-devel mailing list