Enable all hardening buildflags.

Adds ld -z now & -fPIE -pie.
This commit is contained in:
Bas Couwenberg 2016-03-25 17:19:59 +01:00
parent 8a133ddf53
commit 83d823e76d

3
debian/rules vendored
View File

@ -7,6 +7,9 @@
# This has to be exported to make some magic below work.
export DH_OPTIONS
# Enable hardening build flags
export DEB_BUILD_MAINT_OPTIONS=hardening=+all
# These are used for cross-compiling and for saving the configure script
# from having to guess our platform (since we know it already)
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)