add hardening flags

diff --git a/debian/changelog b/debian/changelog
index c39cc593562fa2495dd81b6035f131a446a6b096..82396c05d1782e463fcb7b0f1db9a2a15e6b8a15 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,10 @@
-dcmtk (3.6.1~20160216-2) unstable; urgency=medium
+dcmtk (3.6.1~20160216-2) UNRELEASED; urgency=medium
 
   * d/p/08: remove SYSTEM_PROCESSOR usage for reproducible builds 
   * d/p/09: add patch to enable compileing against openssl-1.1
     Closes: #828281
   * d/p/04: update patch to remove duplicate entries
+  * d/rules: add hardening flags 
 
  -- Gert Wollny <gw.fossdev@gmail.com>  Thu, 26 May 2016 15:47:40 +0000
 

diff --git a/debian/rules b/debian/rules
index c338049f71cd63ceca60cb26f1356b9828cb92cd..16ae5135d6a2f8006b25f52bb644f026b2f9b47a 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,6 +1,9 @@
 #!/usr/bin/make -f
 #export DH_VERBOSE=1
 
+# export DEB_BUILD_MAINT_OPTIONS = hardening=+pie
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
 # reduce overlinking:
 export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed