From 1b9c566f7f186ef78a76dc01babf884dd952638e Mon Sep 17 00:00:00 2001 From: Jeremy Bicha Date: Sat, 14 Oct 2017 14:48:14 -0400 Subject: [PATCH] Build with all hardening flags --- debian/changelog | 1 + debian/rules | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 5a97018..b7548ff 100644 --- a/debian/changelog +++ b/debian/changelog @@ -4,6 +4,7 @@ babl (0.1.34-1) UNRELEASED; urgency=medium * Switch from cdbs to dh * Set Debian GNOME team as maintainer and update Vcs fields * Switch to automatic dbgsym packages + * Build with all hardening flags * Bump Standards-Version to 4.1.1 -- Jeremy Bicha Sat, 14 Oct 2017 14:10:57 -0400 diff --git a/debian/rules b/debian/rules index 036a41b..d269c0a 100755 --- a/debian/rules +++ b/debian/rules @@ -1,7 +1,8 @@ #!/usr/bin/make -f -include /usr/share/gnome-pkg-tools/1/rules/gnome-get-source.mk -export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed +export DEB_BUILD_MAINT_OPTIONS = hardening=+all +export DEB_LDFLAGS_MAINT_APPEND = -Wl,-O1 -Wl,--as-needed # Disable SSE2 except on amd64 ifneq ($(DEB_HOST_ARCH_CPU),amd64) -- 2.30.2