Force non-executable stack

The material files which are included in the shared objects lack the GCC
sections which usually let the compiler conclude that it is safe to mark
the stack as non-executable. Therefore, we force the issue.

diff --git a/debian/rules b/debian/rules
index d3d9ef91d22eeb8a99d8076f9c117187f8a12746..ef1b8f79a4da83ffad984ebbe4eccaabf7c455bc 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -16,6 +16,7 @@ SUPPORTS_VULKAN = OFF
 endif
 
 export DEB_CPPFLAGS_MAINT_APPEND += -DNDEBUG
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,-z,noexecstack
 
 ifneq (,$(filter $(DEB_HOST_ARCH), armel m68k mipsel powerpc sh4))
   export DEB_CXXFLAGS_MAINT_APPEND += -Wl,--no-as-needed -latomic -Wl,--as-needed