[Pkg-octave-commit] [octave] 01/01: d/rules: Harden the ELF binaries by setting bindnow and PIE linker flags
Rafael Laboissière
rlaboiss-guest at moszumanska.debian.org
Wed Jan 27 09:03:35 UTC 2016
This is an automated email from the git hooks/post-receive script.
rlaboiss-guest pushed a commit to branch master
in repository octave.
commit 68b98050c08a55728d24d23ae6f5c69954ceee66
Author: Rafael Laboissiere <rafael at laboissiere.net>
Date: Wed Jan 27 06:58:09 2016 -0200
d/rules: Harden the ELF binaries by setting bindnow and PIE linker flags
These settings are recommended by Lintian. The unit tests pass as
before. We might revert these changes if any performance issue shows
up.
---
debian/rules | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/debian/rules b/debian/rules
index 2b8bc3c..f69ede5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -42,6 +42,11 @@ ifneq ($(wildcard /usr/lib/$(DEB_HOST_MULTIARCH)/hdf5/serial/libhdf5.so),)
--with-hdf5-libdir=/usr/lib/$(DEB_HOST_MULTIARCH)/hdf5/serial
endif
+# Hardening setings:
+# - provide "bindnow" linker flag in ELF binaries
+# - set position independent executable (PIE) linker flag
+export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow
+
%:
dh $@ --with autoreconf --parallel
--
Alioth's /home/groups/pkg-octave/bin/git-commit-notice on /srv/git.debian.org/git/pkg-octave/octave.git
More information about the Pkg-octave-commit
mailing list